0x2, 0x6e6bb5, 0x2, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x1, 0x3, 0x4, 0xc99, 0x9, 0x3f}}, 0xe8) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r11 = open(&(0x7f0000000100)='./file1\x00', 0x400000, 0x130) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x1, &(0x7f0000000140), 0x4) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000300), 0x12) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), 0x0) preadv(r14, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) 07:13:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3ef30fc7fcd9f7262e65650f01cfb8cb000f00d866b9960300000f32440f20c0663506000000440f22c066b9f50200000f32c03000360f01cbc4c231cfb12800", 0x40}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0xb5, 0x5, r3, 0x0, &(0x7f0000000080)={0x990a7d, 0x7c, [], @value64=0x1f}}) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) r6 = open(0x0, 0x0, 0x0) fsetxattr(r6, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:13:00 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0xfffffffffffffed9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 326.068709] IPv6: Can't replace route, no match found [ 326.076877] selinux_nlmsg_perm: 160 callbacks suppressed [ 326.076892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.106494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.181037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 07:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x600000000000000) [ 326.226821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 07:13:00 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0xfffffffffffffed9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:00 executing program 5: r0 = socket$kcm(0x11, 0xf, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x148) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x40, 0x6, 0x6, 0x40, 0x0, 0x0, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x400, 0x1, 0x0, 0x0, 0x2c64, 0x833d, 0xffff}) [ 326.308220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.393060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.437188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.508646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 07:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) 07:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x800000000000000) 07:13:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0xfffffffffffffed9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:01 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x480) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) r8 = accept4$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14, 0x800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r9) sendfile(r8, r9, 0x0, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8e800) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r11, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3659}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000400)={0x9, 0x0, 0x200, {0x4, 0xa1}, 0x20, 0x200}) recvmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x1f}, 0x20000000) 07:13:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) kcmp(r0, r0, 0x6, r2, 0xffffffffffffffff) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001540)={'vcan0\x00', r7}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001640)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x8001, 0xa, 0xb0, 0x80, 0x6, r8, r10}, {0x7f, 0x9, 0x4, 0x1, 0x5, 0xb552, 0x6, 0x400}, {0x0, 0x1f, 0x7, 0x6}, 0x2, 0x6e6bb5, 0x2, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x1, 0x3, 0x4, 0xc99, 0x9, 0x3f}}, 0xe8) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r11 = open(&(0x7f0000000100)='./file1\x00', 0x400000, 0x130) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x1, &(0x7f0000000140), 0x4) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000300), 0x12) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), 0x0) preadv(r14, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) [ 326.551032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 [ 326.574336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13305 comm=syz-executor.0 07:13:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0xfffffffffffffed9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 326.688869] IPv6: Can't replace route, no match found 07:13:01 executing program 4: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@isdn, {0x0}, 0x0}, 0xa0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0xf1fb9131f8704894, 0x70, 0x81, 0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x8, @perf_bp={0x0, 0x4}, 0x2, 0x7d7d, 0x8, 0x7, 0x3, 0xf1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) connect$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r5 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f0000000000), 0x10, &(0x7f0000000400)={&(0x7f0000000300)={0x4, 0x2, 0x5, {0x0, 0x2710}, {r6, r7/1000+10000}, {0x3, 0x1}, 0x1, @can={{0x4, 0x0, 0x1}, 0x0, 0x6, 0x0, 0x0, "b0d8cf8424489f99"}}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x20044808) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) 07:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x900000000000000) 07:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xe80, 0x0) 07:13:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) kcmp(r0, r0, 0x6, r2, 0xffffffffffffffff) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001540)={'vcan0\x00', r7}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001640)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x8001, 0xa, 0xb0, 0x80, 0x6, r8, r10}, {0x7f, 0x9, 0x4, 0x1, 0x5, 0xb552, 0x6, 0x400}, {0x0, 0x1f, 0x7, 0x6}, 0x2, 0x6e6bb5, 0x2, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x1, 0x3, 0x4, 0xc99, 0x9, 0x3f}}, 0xe8) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r11 = open(&(0x7f0000000100)='./file1\x00', 0x400000, 0x130) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x1, &(0x7f0000000140), 0x4) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000300), 0x12) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), 0x0) preadv(r14, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) [ 327.010681] IPv6: Can't replace route, no match found 07:13:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:01 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) accept4(r2, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x800) close(r1) accept4(r1, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x80000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) 07:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xa00000000000000) 07:13:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10002, 0x0) [ 327.185632] audit: type=1804 audit(1579763581.766:111): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir237157035/syzkaller.JMCbuo/41/file0/file0" dev="loop4" ino=134 res=1 [ 327.265750] audit: type=1800 audit(1579763581.776:112): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=134 res=0 07:13:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() dup(0xffffffffffffffff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 327.321907] IPv6: Can't replace route, no match found 07:13:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) 07:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xb00000000000000) 07:13:02 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r3) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r5, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@loopback, 0x2e, r5}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r6, &(0x7f0000000000), 0x10000000c) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, 0x0) 07:13:02 executing program 1: socket$inet6(0xa, 0x2, 0x0) getpid() r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 327.550659] IPv6: Can't replace route, no match found 07:13:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10004, 0x0) 07:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xc00000000000000) [ 327.735744] IPv6: Can't replace route, no match found 07:13:02 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:02 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa30000, 0x1000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa20934, 0x1f, [], @p_u16=&(0x7f0000000000)=0xff}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x8000, @remote, 0x10001}}, 0x6, 0x3, 0x0, 0x2, 0x1, 0xa0, 0x81}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0x80000001}, &(0x7f0000000280)=0x8) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x41) 07:13:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) 07:13:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xe00000000000000) 07:13:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d2e0b9199800b3e246d643573756d74727573746564252670"], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_SET_FP_MODE(0x2d, 0x2) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000640)='/dev/sg#\x00', 0x1, 0x200000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r10) r11 = dup(0xffffffffffffffff) setsockopt$packet_int(r11, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r11, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000680)={r2}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r13) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r14) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r15, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r15) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r16, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r16) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r17, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r17) r18 = syz_open_dev$tty20(0xc, 0x4, 0x0) r19 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r20 = syz_open_dev$ndb(&(0x7f00000006c0)='/dev/nbd#\x00', 0x0, 0x100) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r21, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r21) r22 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r22, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r22) r23 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r23, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r23) sendmsg$unix(r5, &(0x7f0000000800)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="0c8ad61d61558b40129d0a2317e168faadbaee53931927a5fd2cd6db9d062b9555815f76e30e0a3f3ac3b41a367fef6b234c8b2b1f81630c2c735581fad2440659d072ab290a7ab4d574d6e11c4432d866e230af6391bc593683636bd48496f6e51b1543faeed8d1b7a66e522c83c7caee4e67f586fe90238e9ef28a08b5318b26cd783114e31c6b96c42f5b3d2bf268", 0x90}, {&(0x7f0000000580)="98b6fb8d8aa720e31e5a9324d34ff4d7b126554e332be889e33f8df8455bbffeca196eda6590a2aafc3b5d3f92ef04b2643432c6a4772b9779edcff5d01b90cc315669ba7584ce77b5b16a124adb6653458e4ce834a689b9ddf545e554050c290610c9e28675d1c657d445a79030a20b5a94820a2f6ac22887acbca18967bbb442e060d1021f132cf1b2d04b90562e6ebb92a40dbf12ed96365b148f5e3d2a858ee462848e0ebcc7174a7df2608ecf8f6ebdd123", 0xb4}], 0x2, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x24, 0x1, 0x1, [r3, r7, r8, 0xffffffffffffffff, r9]}}, @rights={{0x1c, 0x1, 0x1, [r10, r12, r3]}}, @rights={{0x20, 0x1, 0x1, [r13, r14, r3, r15]}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r16]}}, @rights={{0x28, 0x1, 0x1, [r17, r18, r19, r2, r20, r21]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r22, r23]}}], 0xe8}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000008030000500100005001000050010000000000000000000038020000380200003802000038020000380200000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb3f000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000028015001000000000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000000000000000001726f7365300000000000000000000000880000000000000000000000000000000000000005000000a600000000000000000000000000000028005443504d535300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e80000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x103) [ 327.985971] IPv6: Can't replace route, no match found 07:13:02 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a03, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x1, 0x14, [0x6, 0x80000000, 0x6, 0x1ff, 0x7]}) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40010040) 07:13:02 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) 07:13:02 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) unshare(0x0) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="b345fd58805fe0abd8cbc6ef40b720e763d59c9a206d0b6510abafc41352fa93e9fe7b81c03aa5d4808dc56f21594e3818814df707fc11a2d237bf22b4ab982b4998d32999f532560046f02710029cae1bb23da5f62f3163f8f9881cbf258429dd124ce6cbe70742bc0a4bc02b75e38816929493ef262e8a2973cf36ca5a13237e8526926ff16e9ea368776d2e6a4549de19eed8cc4c50e24352e2817f55b7400cf25630e26aac7464808f33dccd92c997f066a603b8b3ae6822a7e2ec521d97f8ff7106d459f100015898b7dc6cc3b3", 0xd0}, {&(0x7f0000000340)="e2b96ec110ebf6fa94ec5d25a6c3acabecaf412b2dd3f05fef09fbc9bbaa926804385120abc0533b987e6a2c8d5be6729fde0a82c6539c19b4cf97fe1d15b99061d752fa4e9a2df7a5d446a4479716dee493d1d1253318eadec27d1be19f14a337d51508812e115277d4b846d4da2e756af74e6060f6ece5e27615efd96a", 0x7e}], 0x2, 0x0, 0xd9a8340d1facdab5}, 0x805) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 07:13:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xf00000000000000) 07:13:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10006, 0x0) 07:13:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{@none}, {@none}, {@none}, {@none}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) r9 = geteuid() prlimit64(0x0, 0x6, &(0x7f0000000180), 0x0) setreuid(r9, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 07:13:02 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 328.256842] IPv6: Can't replace route, no match found 07:13:02 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:13:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x1000000000000000) 07:13:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10007, 0x0) 07:13:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f00, 0x0, 0x400, 0x100}}) [ 328.502126] IPv6: Can't replace route, no match found 07:13:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10008, 0x0) 07:13:03 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x12000) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x8, 0x80) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x100, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000340)=""/222, 0xde}], 0x2, 0x100) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x1, @empty, 0x9}}, 0xa, 0x2, 0xad, 0xb72a, 0x0, 0x0, 0x7f}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r4, 0x5, 0x30, 0x0, 0x8}, &(0x7f0000000140)=0x18) r5 = socket(0xa, 0x3, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000740)='vxcan1\x00', 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) accept$ax25(r5, &(0x7f0000000500)={{0x3, @netrom}, [@bcast, @bcast, @default, @null, @netrom, @null, @rose]}, &(0x7f0000000580)=0x48) 07:13:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x3103000000000000) [ 328.689318] IPv6: Can't replace route, no match found 07:13:03 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}}], 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) 07:13:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:03 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x80000000, 0x8, {0x77359400}, {0x4, 0x1, 0xfd, 0x8, 0x2, 0x9d, "951ab87c"}, 0x200, 0x3, @fd, 0x73, 0x0, r4}) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, [0x67c46fe8, 0x1ff, 0x401, 0x9ac]}) socket(0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000055b000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f000028a000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "d0bb2b4773702673977fcdb62f38d3222e522d712c5b18522592a08126eda6037e23ef5f90e60272b83e11bb9afaa15ad0ff149a9d9a651bf516ebe97c6a30f3", "9bcc42c51dae54f82a0d62b0ae635a9d584310ca7b7339f06b24947acddfda1fa220b284507da1ac4cb4952041546c527704f68a8c78275f581d9d4502c00315", "0c837782e0f8ce62239c39e417136ea8af31aa938fec713c9906f34761a96ab0"}) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r10, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f00006aa000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 07:13:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10009, 0x0) 07:13:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x3f00000000000000) 07:13:03 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="31000000100000000000110000000392efb2b5e8bc5345244d5af339690400c58592d43ef254e0fbb14fa387e2c4ca5bd8926c9e76f58bbfc611d9dc2ee89b"], 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xf}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x39}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3165}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) [ 328.917281] audit: type=1400 audit(1579763583.506:113): avc: denied { map } for pid=13541 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=53646 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 328.950420] IPv6: Can't replace route, no match found 07:13:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000400)="66d31d6d85cec3bdf041b1ed4f09af324e8f3e1bae6a2480f7361fb375cbc08484b8ff612b192c51e63b802a9b05b08f9e29560e072b8e36f8be726b1cc9b21200617948a4bf801b28202e0789db298de9f51c182d71a0f74a003e6dd4b3c89318e1ea13d233576d6037293e027ab7a4781515d0cd8cbc1bd0d3ae198a2c49ab93972c806492d40ebce1e664741e71386344a982878b727edbb97d3492a93e41e879903faa1f", 0xeed12083168c8baa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0103000000000000f06c766172c25ec1603aea261f6735657cc508517c54ada766d815ff62fdb3410165d0682190e16ba86bf62acc88dd26f1a1d779575147e7bc93db4179f459f0e080391263abff2e438c614a7df1a38b1caaaa0b718857e686a3e09030123583d9807360337acf0161d6985da7561e0560198f3b8d5a33ca3235014adbe5", @ANYRES32, @ANYRESOCT=r4, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRES32]]], 0x7, 0x1) r9 = open(0x0, 0x0, 0x0) fsetxattr(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='systmtrusted%&ppp1(\'\x00'], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev, 0x0}, &(0x7f0000000100)=0xc) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r11 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBMODE(r11, 0x4b45, &(0x7f0000000080)=0x2) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:13:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x6000000000000000) 07:13:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000a, 0x0) 07:13:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='v', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x8, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 07:13:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 329.195747] IPv6: Can't replace route, no match found 07:13:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x6558000000000000) 07:13:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x400, 0x100}}) 07:13:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000b, 0x0) 07:13:03 executing program 4: r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cbf5017, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:13:03 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r3) r4 = dup3(r2, r3, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000100)=0xffff) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r6, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) [ 329.421533] IPv6: Can't replace route, no match found 07:13:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x8100000000000000) 07:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000c, 0x0) 07:13:04 executing program 5: socket$kcm(0x11, 0xa, 0x300) 07:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x88a8ffff00000000) [ 329.657857] IPv6: Can't replace route, no match found 07:13:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200fb70fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14}, 0x14) 07:13:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 07:13:04 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = dup(0xffffffffffffffff) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x880, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{}, [@bcast, @remote, @rose, @remote, @netrom, @rose, @null, @netrom]}, &(0x7f0000000080)=0xffffffffffffffd8, 0x0) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000480)={0x7fffffff, 0x3, 0x4, 0x10, 0x1, {r4, r5/1000+10000}, {0x4, 0xc, 0x5f, 0x5, 0x87, 0xc1, "55a438a7"}, 0x4, 0x4, @offset=0x7fff, 0x9, 0x0, r2}) recvmsg$kcm(r6, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xb80) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 07:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x9effffff00000000) 07:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000e, 0x0) 07:13:04 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) [ 330.097531] IPv6: Can't replace route, no match found 07:13:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 07:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xb6a651e700000000) 07:13:04 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x100, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) r2 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r2}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) 07:13:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000f, 0x0) 07:13:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) [ 330.299124] FAT-fs (loop3): Directory bread(block 63) failed [ 330.318543] IPv6: Can't replace route, no match found [ 330.332531] FAT-fs (loop3): Directory bread(block 64) failed [ 330.363834] FAT-fs (loop3): Directory bread(block 65) failed [ 330.373379] IPVS: ftp: loaded support on port[0] = 21 [ 330.379518] FAT-fs (loop3): Directory bread(block 66) failed 07:13:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xc000000000000000) [ 330.410964] FAT-fs (loop3): Directory bread(block 67) failed [ 330.433773] FAT-fs (loop3): Directory bread(block 68) failed [ 330.454391] FAT-fs (loop3): Directory bread(block 69) failed [ 330.489024] FAT-fs (loop3): Directory bread(block 70) failed [ 330.512364] FAT-fs (loop3): Directory bread(block 71) failed [ 330.534403] FAT-fs (loop3): Directory bread(block 72) failed 07:13:05 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10010, 0x0) 07:13:05 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xc00e000000000000) 07:13:05 executing program 5: socket$kcm(0x11, 0xa, 0x300) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x100000000, 0x80000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x202603, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x83}, 0x2) 07:13:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x5, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e23, @empty}}) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 330.948189] IPv6: Can't replace route, no match found [ 331.009236] IPVS: ftp: loaded support on port[0] = 21 [ 331.227644] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 331.235732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.249185] F2FS-fs (loop3): Fix alignment : done, start(5120) end(13312) block(7168) [ 331.263250] F2FS-fs (loop3): invalid crc value [ 331.269095] F2FS-fs (loop3): invalid crc value [ 331.274521] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 331.283275] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 331.290405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.300995] F2FS-fs (loop3): invalid crc value [ 331.307270] F2FS-fs (loop3): invalid crc value 07:13:06 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) 07:13:06 executing program 3: r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) sendto$phonet(r0, &(0x7f0000000140)="5f2ec75f859e04b562a5cbc8eedf20e2bfea8f6f691e9f3d8354469448af9580df74b9955a96c8dad10cf4d76ca753af95b2a3e50013f2c1613fab8bba7d4da71aabab9899d0d64aed51d0fcb33834a46944d3857b9f", 0x56, 0x40, &(0x7f00000001c0)={0x23, 0x9, 0x5, 0x3f}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/2452], 0x999) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x800, 0x2, 0x5]}, &(0x7f0000000240)=0xa) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10100) 07:13:06 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) msgget$private(0x0, 0x420) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xf2d3dcb621ee861b, 0x6}, 0x10) 07:13:06 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10011, 0x0) 07:13:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xe03f030000000000) [ 331.567886] IPv6: Can't replace route, no match found 07:13:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xf0ffffff00000000) 07:13:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 331.601353] selinux_nlmsg_perm: 230 callbacks suppressed [ 331.601369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 331.632576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 331.743040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 331.782626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 331.816544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 331.836996] IPVS: ftp: loaded support on port[0] = 21 [ 331.847497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 07:13:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xffffff7f00000000) [ 331.885682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 07:13:06 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40000000) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x4, 0x8000, 0x0, 0xa11, 0x4}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r8) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYRES32=r3, @ANYBLOB="219afb2278d02c3048c2aa3c170bbb2fac", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000340)={0x100, 0x1000000, "147d8a4f3a1b32617760f9d212a1356ebcfee099a9adfe9b", {0x10000, 0x9}, 0x9}) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) 07:13:06 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) [ 331.971215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 332.030717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 332.093275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13715 comm=syz-executor.0 [ 332.502543] IPVS: ftp: loaded support on port[0] = 21 07:13:07 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) 07:13:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xffffffff00000000) 07:13:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10012, 0x0) 07:13:07 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x29, 0xf, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0xfffffffffffffe35}, 0x0) 07:13:07 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0x7, {0x400, 0x1, 0x6, 0x4}, {0xfffffff9, 0x9, 0x6, 0x3}, {0x8219, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) recvmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 333.310339] IPv6: Can't replace route, no match found 07:13:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xffffffffa0008000) 07:13:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10013, 0x0) 07:13:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0xfffffffffffff000) [ 333.586425] IPv6: Can't replace route, no match found [ 333.680671] IPVS: ftp: loaded support on port[0] = 21 07:13:09 executing program 3: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) 07:13:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:09 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10014, 0x0) 07:13:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCSTI(r1, 0x5412, 0x8) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000024000705000000000000e67d000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRESOCT=r0, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x3}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:09 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:09 executing program 4: socket$packet(0x11, 0x0, 0x300) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x40, 0xfffffff8, 0x2, 0x3, 0x3f}, &(0x7f0000000340)=0x9c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x52) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$reject(0x13, r4, 0x1, 0x7, 0xffffffffffffffff) r5 = socket$inet(0x10, 0x14032ab67c34f452, 0x9) ioctl$sock_ifreq(r5, 0x541b, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@random="77a4771f1a83"}) [ 335.409831] IPv6: Can't replace route, no match found 07:13:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 335.447070] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:10 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10015, 0x0) [ 335.528369] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 335.646208] IPVS: ftp: loaded support on port[0] = 21 07:13:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f0000000000)=0x7f) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002580)='/dev/nvram\x00', 0x80, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f00000025c0), &(0x7f0000002600)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) [ 335.669029] IPv6: Can't replace route, no match found 07:13:10 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10016, 0x0) [ 335.827436] IPVS: ftp: loaded support on port[0] = 21 07:13:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 335.943415] IPv6: Can't replace route, no match found 07:13:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:13 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10018, 0x0) 07:13:13 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) 07:13:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x42100, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000280)=0xf) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000804000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x3, 0x7, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0x0, 0x4000000000000000) 07:13:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x29, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = dup(0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bd00040000000000000000000042e33089754c8107c3cd3923dd4a712f71aeeeba4c61028ba5b9110cc2ff06007b6b4816122d2550829eaa9435c99926022b8753a188faad9a223be6d06fe96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637e248689cce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacb40d32e4b58a8d2725561f6110fd7b06f98b5274cc5c1e298a16324fe2", 0xc0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000005c0)={[], 0x2, 0xec, 0x22, 0x0, 0x1b, 0xf000, 0x100000, [], 0x800}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r6, r8}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f00000000c0)={'wp256-generic\x00'}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r9, 0x890c, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x405440, 0x0) dup(r10) [ 339.166938] IPv6: Can't replace route, no match found 07:13:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 339.207283] selinux_nlmsg_perm: 80 callbacks suppressed [ 339.207301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000080)=0x4, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 339.317308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 339.373186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRES32=r5, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32=r4, @ANYRES32=r1]], @ANYRES32=r3, @ANYRESOCT=r6], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) [ 339.457026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x3, 0x7}, &(0x7f0000000340)=0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) bind(r1, &(0x7f00000001c0)=@sco={0x1f, @fixed={[], 0x11}}, 0x80) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x82001, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x0, 0x0, 0x33}, 0x0) r5 = socket(0xa, 0x3, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380), &(0x7f0000000700)=0xe) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) r7 = syz_open_dev$media(&(0x7f0000000680)='/dev/media#\x00', 0x3, 0x22140) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x3805, @loopback, 0x1}], 0x1c) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f00000004c0)={0x8, @capture={0x1000, 0x1, {0x1, 0x1}, 0x7, 0x9}}) close(r6) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'\x00', 0x2000}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername$inet6(r9, &(0x7f0000000780)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f00000007c0)=0x1c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x40}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x8000, 0x0, 0x7, r10}, &(0x7f0000000140)=0x10) 07:13:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 339.596222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000cf7000000000000095000000000000007c41776586b2841fb71916411c22f945fb70fc5b4e982e61d68b61c1ba6e53657b8dc7c5bb72000100001bc6470051a39eab7f86e711b7bc5e5c45d8cfc8c575b46ecea5a34655b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6c51cc11505e90fbda60000000000e9c303f25e537231"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x200, 0x8, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1ab, &(0x7f000000cf3d)=""/195}, 0x48) [ 339.655755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 [ 339.690159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58004c01830000000000000000000000000000005054ed1c8ebb7a7d8f7138ec8c43adc2c45cdc84722c644045de19f3deeedbc8fa012eaf7c28cd2f40b70b0a26b0f18c2089cc7d8a32e3d15ce6bf66", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 339.722196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 [ 339.742349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 [ 339.831974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13854 comm=syz-executor.0 07:13:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10019, 0x0) 07:13:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x42100, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000280)=0xf) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000804000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x3, 0x7, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0x0, 0x4000000000000000) 07:13:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000021f06c766172c2ea261f674d657cc508517c54aca766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r4, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYRESHEX=0x0]], 0x7, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r9) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r9, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) 07:13:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 340.036627] IPv6: Can't replace route, no match found 07:13:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket(0x21, 0x6, 0xc1) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x2000000000000074, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc000) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x1, 0x7, 0x6}, &(0x7f0000000680)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0xfffffffffffffffe}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0xffffffffffffffff, r4, 0x0, 0xa, &(0x7f0000000100)='127.0.0.1\x00', r8}, 0x30) r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat(r9, 0x0, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) statx(r1, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, &(0x7f00000004c0)) mount$9p_tcp(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x260004, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f00000000c0)={0x9e0000, 0x3, 0x81, r0, 0x0, &(0x7f0000000040)={0x9909ca, 0x100, [], @p_u16=&(0x7f0000000000)=0x322}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) write$selinux_access(r11, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330202f7573722f6c69622f74656c6570617468792f696f6e2d686f74726f6c2d352030303030303030303030303030303030303030350038ee16850101bb4aa49fdbf30a8bdc364c379ed8f94f33d9b86a2ef2e1466049bc326e24762e2a65c14011162c66a921473ee0a4848c3b7a838bbc37515ee2174c46a7a9c63d7adbc8863858e28d0b7b7289b93646c4aa2a4d4019f6046400"], 0x59) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r11, 0x0, 0x4000) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:13:14 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0xffffff62}, 0x40000063) 07:13:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1001a, 0x0) 07:13:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 340.290746] IPv6: Can't replace route, no match found 07:13:14 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xfe35) close(r1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0xa1c8, 0xffff, r1, 0x0, &(0x7f0000000040)={0x9a0919, 0x3f, [], @string=&(0x7f0000000000)=0x80}}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e00e0b9b21828619373a1ca796ae6c564ee69cd6849a3523d785e72fe4b135bbcc81a81694f57a44bcde1ad934c292c612e465db4dbb24f42ff5af33c8c7b0fe82d9d6881454753c9bcef8e83ac64a26f16f0c71428ea3c"], &(0x7f0000000240)=""/182, 0xb6) ioctl$RTC_WIE_ON(r2, 0x700f) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000140)={0x4, 0x7b6fad80, 0x5}, 0xc) 07:13:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1001c, 0x0) 07:13:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000700004f00b4250000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 340.563367] IPv6: Can't replace route, no match found 07:13:15 executing program 3: r0 = getpid() mlock(&(0x7f00007f5000/0x2000)=nil, 0x2000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x3000089, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000100)) r4 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) clock_gettime(0x0, &(0x7f00000000c0)) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 07:13:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1001d, 0x0) 07:13:15 executing program 4: setgroups(0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x7fff, &(0x7f0000000000)="f7816c24a6777d14ede111ea939d9f329d805ef11b6bb84edb6c0f388bb5cde3d446a163edc2bc800c865ae2e0bac3d3e49eae3054b26fe69e"}) setresuid(0x0, 0xfffe, 0x0) shmget$private(0x0, 0x12000, 0x1800, &(0x7f0000fee000/0x12000)=nil) 07:13:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:15 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x5) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="100025bd7000ffd9df250200000045032eb743d9b2152d5eac0842a31343a374b80f42fe0084c059dda9618915ed337d37268871bf532334a4f2ea417f54cb6206954123ae5cf55b3a5f94996b0a045f0c696a242e0f831c40c40bcf17a4db5540decfa0f4beb6532e94da66b3140bebe9a3b8324b0637dba102f2375720b1efcf5879bde24119f6ef9ae05bdffae47385"], 0x14}, 0x1, 0x0, 0x0, 0xd4}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40000023) [ 340.800923] IPv6: Can't replace route, no match found 07:13:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4040, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@deltaction={0x150, 0x31, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62b}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x270a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x600c1}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) ioctl$RTC_AIE_ON(r7, 0x7001) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:15 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x1) 07:13:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="bb05000023858876dc785d01e0f4048381bf6067df6b8d46a4daa83bee1a172f573344e9649777f90740acd91b132ee061d983218b3deef08a9b06d0c507b68cf062144268f32cee7bf8d056c8edec5e2b8c1f6864d13316b969cd9942445247af633fca5f823c2828bc25a2ac39dacbe4ad64fef9590e09b825c05a3187ea819c6eb30fdf5e8216893953f6ca5711cba8e8ed7b354a2efd257b5dbc70e74e85268c4bd7ffd8b7c6c4c07f4f3692c1e7f92d58759c36dd8e2a7843914912cee3043d86cac1b1e9a7e406b7f85372d499bb094b228d0ebed145163ff34008b63c4b6753d8deea64399a667dc8356abd9a7b52cee9f714dc3ca91302767e61d52cebd29d0e459b9de7c9f7d7d3f3dd48de3d7f40457c1a0e9376dbff06cb2fae63631f13350425fd5f17c3277fd046ec7c95fb02ff35ca7b48bd1e5e7dfbea6e34e66d956f4f924fbe6cd068b05fe253961be4e63187d1148506e56c482a47f5aae426f690939b53ecfb2119773b1a4ecf66a8bb11fed166499ad740b06f55297ea6067040b31b2ec56316d1ec54b5afdddcf25e9ed0dce62579ad42f289c179853ef56f3a98772a02888207b869465d69b668724cd3acf5e2906f1d1bd5aa532e67cba5fa1b4c6ca0db03eab9abfbfe8664ebf2f76a01d2f8ea88e53b0d916b75dfaaa82208997fdf2e64c551892bcb7ea528932fbfb0105d4d408c99aae9ef5c4553158e5dbc9d8c56ffbc8befd62c514b1adea4ebfe2d558f7aa17e986378c70b6ccaff9178532a95a0b489af197c67267140d492fe7c038458db6dab695080dbe6524fa4cfdde24e88ce2d852da7b2c69a9067db0cf85c443267c6190887a4ccaf09b282f089009ecc81b56b1b52555d619fb1c5c96de967ea1ae49d2afcb1c3d1fa92186e31a277117823e4515379e62ebda8dccc58eb2ff498cad384a53a615aed93ac9bf75f3cd4dbbb7d4938e54682c8c99a91e8c8640d19e91d9fe1636590d30bd122ca11a5ea7e26d4fb6bae5fefb6279789ff7b7f39850043e54ff550bbfcbd9f53084f2e35b7e36189ef28e5c7f92e4995e456de061b8b154aab1af538e97b29ec0885f9841e1ac3222c80a55822f9939a43674d07e8636ff68e24a4beef775ff44a4fe39e3873c4afa26b071323074bf9cc2b087f04ee241696459c912edb4fe4cc66fb99341816bf6cc7fe3cbb7f3b776deb28e925b6f77d047ba6a3e3740000003dd95e41fa3cf4078e70fb5e6d15a204be05c3c9e0cc2e42d126a44d1c46c0cb6d1f316662a1b38979adae402f788604a0f20960368fb4b903d8c88153c4c0b2897200091dd0b8f0ed64a94f9778d29188f2d828c7b69e63b02061d09830434cfac735736384f5df91d2baba51b2d7920bc4c1184389eacc5702149f940389e89d4c5c20ab7af128417e113481fb95c329e7a560b96be390a7922c2562e4b107302a8bfcfe48d703021335245ee13b9899f5169ff3c51750934c4b523d45ff3b1e6b37c1945f6e7df20f97b5597932ed35d8c8da46042f2482169e732ca1cad8fa8fced08e1aef953b6d30c1ed8c5f4219a78732de02061bb11a14cb183cd903c3ebe475158c23ce4f968447ce5fd3b1dcb87bddd95db5bc13fa3bfbefe668cc995fba4d79f9489669426678df1ac3c44fc5fb9f12ccf2346460fffee4ff56685228c037e5643767809e5b305d60bc1df7bcdac72226585dbd9d6e5bd28801d33054748d93e309f4c111c01396619e2cb4e4e119088d80a7a362cd4dd2c0e37a091c3de4fc95dd63b285bfbd7b605c751792e426f4301f2b8a9c6ca5e11df3f400fdc261dd03a4c9d62a5bf6bff4cc7a6c3d4374199d293a6993e640f581ab4d3e83733d73ef30c5b0830272eac7447abb58f138047aae63cdae0c5454ad67801b6a90ab3bcff458094a10de7fc18521b701aa5ae6d9c50a8a7357aceada94e53b9dc6a2f6012f87c10a3c0e5eb37f4151cbd448e50c1b48730d85fca7c3aa23947bf1eea1880021c4271e4347e8b294d51863a97290908e33fa7142c7c4e72abfe9f914b6d138000000000000f2d95a5cb030c70100"/1479], &(0x7f0000000040)=0x5c3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_DUMPABLE(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 07:13:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1001e, 0x0) 07:13:15 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe49}, 0x0) [ 341.141304] IPv6: Can't replace route, no match found 07:13:15 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2d706964737acaabe6fc0820"], 0x6) 07:13:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10021, 0x0) 07:13:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:15 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000009c0)={[0x4, 0x8, 0x10000, 0x2, 0x8, 0xff, 0x4, 0x3, 0x6, 0x8b26, 0x7, 0xfffffffffffffffc, 0x1704, 0x2, 0x5, 0x5], 0xd000, 0x10100}) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)) timer_create(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/156], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/44], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/67], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/198], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/15], @ANYBLOB="1efbffffffffffff", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/54], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/42], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/244], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/219], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00'/24], 0x48}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xe, r3, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) r6 = fanotify_init(0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="ffd9030000005b7213f6011d663000000000e019c5e3a9eb07009301001c8000000000315f368500003926c2fb6f93c32cfd7a8ac75f8100a77b4db77b74412c6536abf8f1"], 0x3f1) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_STA_WME_MAX_SP={0x21, 0x2, "6e211332daec8c0af75d5adaa83ad1493230bc9e800ddfb16d2c96da2e"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) fanotify_mark(r6, 0x1, 0x20, r7, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000640)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="9d2ee961e76e"}, 0x8, {0x2, 0x4e20, @empty}, 'macvlan1\x00'}) 07:13:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x5) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 341.366291] IPv6: Can't replace route, no match found 07:13:16 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = semget$private(0x0, 0x7, 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6}, {0x1}], 0x2) semtimedop(r1, &(0x7f0000000100)=[{0x0, 0xfff9}], 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/94) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x43) 07:13:16 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x60443, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x6}, 0x8) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 07:13:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10022, 0x0) 07:13:16 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000009c0)={[0x4, 0x8, 0x10000, 0x2, 0x8, 0xff, 0x4, 0x3, 0x6, 0x8b26, 0x7, 0xfffffffffffffffc, 0x1704, 0x2, 0x5, 0x5], 0xd000, 0x10100}) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)) timer_create(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/156], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/44], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/67], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/198], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/15], @ANYBLOB="1efbffffffffffff", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/54], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/42], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/244], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/219], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00'/24], 0x48}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xe, r3, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) r6 = fanotify_init(0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="ffd9030000005b7213f6011d663000000000e019c5e3a9eb07009301001c8000000000315f368500003926c2fb6f93c32cfd7a8ac75f8100a77b4db77b74412c6536abf8f1"], 0x3f1) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_STA_WME_MAX_SP={0x21, 0x2, "6e211332daec8c0af75d5adaa83ad1493230bc9e800ddfb16d2c96da2e"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) fanotify_mark(r6, 0x1, 0x20, r7, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000640)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="9d2ee961e76e"}, 0x8, {0x2, 0x4e20, @empty}, 'macvlan1\x00'}) 07:13:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 341.551840] IPv6: Can't replace route, no match found 07:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x14, &(0x7f0000000640)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r4, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0xff, 0x5}, 0x8) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r6, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 07:13:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10024, 0x0) 07:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x1000, 0x6}) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:16 executing program 5: timerfd_create(0x1, 0x80000) r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x100) [ 341.784273] IPv6: Can't replace route, no match found 07:13:16 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x60443, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x6}, 0x8) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 07:13:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10025, 0x0) 07:13:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 342.004954] IPv6: Can't replace route, no match found 07:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="581a87d87c0040e623000700000000759fffc613e973d69b", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000300)=0x4) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000400)={0x1, 0x1000, 0x5, 0x4, 0x9, 0x2, 0x100, 0x3, 0x9, 0x6e, 0x6b6, 0x5}) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040), 0x0) syz_open_pts(r6, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) 07:13:16 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r7, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x2bc, r7, 0x5, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1d8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf1c0000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @local, 0x7f}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40000000) 07:13:16 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000009c0)={[0x4, 0x8, 0x10000, 0x2, 0x8, 0xff, 0x4, 0x3, 0x6, 0x8b26, 0x7, 0xfffffffffffffffc, 0x1704, 0x2, 0x5, 0x5], 0xd000, 0x10100}) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)) timer_create(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/156], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/44], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/67], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/198], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/15], @ANYBLOB="1efbffffffffffff", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/54], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/42], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/244], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/219], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00'/24], 0x48}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xe, r3, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) r6 = fanotify_init(0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="ffd9030000005b7213f6011d663000000000e019c5e3a9eb07009301001c8000000000315f368500003926c2fb6f93c32cfd7a8ac75f8100a77b4db77b74412c6536abf8f1"], 0x3f1) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_STA_WME_MAX_SP={0x21, 0x2, "6e211332daec8c0af75d5adaa83ad1493230bc9e800ddfb16d2c96da2e"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) fanotify_mark(r6, 0x1, 0x20, r7, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000640)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="9d2ee961e76e"}, 0x8, {0x2, 0x4e20, @empty}, 'macvlan1\x00'}) 07:13:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10026, 0x0) 07:13:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 342.365609] IPv6: Can't replace route, no match found 07:13:17 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="4f471618b04ab9408927f729037e900a782859df77efd9cc49efaa4b24faf48e4152379959a0c93f064b3d669185386568acf6f22bc090e817bd573295a03fe7fabe95c16ed27d4ba637f5cb472d44d5ab58c681175f96b69800e9457621477ccd21d61a32cd3bd74caedaa17e30d58c7d43f45c3c3efa5af7f50af300e5c6a02505630de00feb31a330bf7c74f334aa8ebecd0eabff1cf1e1ebadf1c9db86acf0e43b822f31544eec6ae023f40400351e1b32ea138f6bff60f8") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x200}) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r2, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10028, 0x0) 07:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 342.592657] IPv6: Can't replace route, no match found 07:13:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="581a87d87c0040e623000700000000759fffc613e973d69b", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000300)=0x4) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000400)={0x1, 0x1000, 0x5, 0x4, 0x9, 0x2, 0x100, 0x3, 0x9, 0x6e, 0x6b6, 0x5}) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040), 0x0) syz_open_pts(r6, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) 07:13:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10029, 0x0) 07:13:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x0, 0x1) 07:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:17 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0xffffffffffffffd8}, 0x0) r1 = getpgrp(0xffffffffffffffff) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f0000000080)=""/238, 0xee}, {&(0x7f0000000340)=""/225, 0xe1}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/180, 0xb4}], 0x3, 0x0) [ 342.886399] IPv6: Can't replace route, no match found 07:13:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x5c1400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000880)={0x0, 0x0, 0x3f}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x3, &(0x7f0000000040)) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) write$FUSE_DIRENT(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x7c, 0x12, &(0x7f00000001c0)={0x77359400}) 07:13:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1002a, 0x0) 07:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:17 executing program 5: r0 = socket$kcm(0x11, 0x8, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd73, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002840)="1e647f5fb58a96b648323ecd7dd62b1bc9fd15ae9d327b14d186631b33128bcc7a657a03ad0eb70a61d948e501e56c9cf7f61c7cf1bb80ae4210ae623c3b6c87451f3003c7082aae205768c0ef957963281edf3deaa65b", 0x57}, {0x0}], 0x3}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000003a40)}, {&(0x7f0000004ac0)}, {&(0x7f0000005ac0)="a784cbca98531fabc180d8aeaa", 0xd}, {&(0x7f0000005b00)="5a2bb7695801d61fc8901b357f78a9ff5cbfe27b724cc60b7bc7e22a7ea0df0b414737a500d40a9b9b61d23beae10da5ebf4af7746e038b4dbd3ecd3d32ce9620d975b12b9f3456ce5227703e79dd66f23a5fae56b73489b4e98fd385301ed9535f7637944a413", 0x67}], 0x4, &(0x7f0000005cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x48}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14}}], 0x30}}, {{0x0, 0x0, &(0x7f0000007780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007680)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="c40000000000000000009a461de07ef20bbe0e1b362b2b29a5000007000000442c210313b8acac00000001e000000200010001e000000100000007e000000100000007e000000200000a5a8313ecac1414aa000000007f000001e00000029b0546133ec90940947a07c1244000070616dc9030444cf9e1ac1414bb000004017f00000100000100ac1e00010000020000000b00000000097f00000100000003ac1414aa00000fffac1414aa000000067f00000100000001ac14142b00000401891357ac141421ac1414bb00000000ac14147c5ad0e183085df1000000000000000000000100000053000000000000001400000000210000000000000100"], 0xfd}}], 0x6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) r11 = getpgid(r10) write$P9_RGETLOCK(r6, &(0x7f0000000080)={0x23, 0x37, 0x1, {0x1, 0x9, 0x6, r11, 0x5, 'vfat\x00'}}, 0x23) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 343.241296] IPv6: Can't replace route, no match found 07:13:17 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000828bd7000fcdbdf25130000000500130101000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x401, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x4, 0x8}, &(0x7f00000000c0)=0x8) 07:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100b0450aa6c8945e430f558b93118b9852"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1002c, 0x0) 07:13:18 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40000003) [ 343.526506] IPv6: Can't replace route, no match found 07:13:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x5c1400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000880)={0x0, 0x0, 0x3f}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x3, &(0x7f0000000040)) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) write$FUSE_DIRENT(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x7c, 0x12, &(0x7f00000001c0)={0x77359400}) 07:13:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="6722b48b9fa50a7a4f0d1fd386b41663feae15b00848899c9ad6d60f9c7fc625e6a00e2237fc2b6803687e754d2ab442c8a9373555c2f009c5138a3efe8a3c1a0cbbc394d57c795744a3adf31961a59109a7f94e8c088d23e99799ee14ce9b79d0c758b5d6b547215788b21d4158b5bc127e8626af051fd9473272ea78ceb36d39859a284eb5638752b53e2d3303c30a7a0b97c0225f75f9955cb75b2ac5617ba9e5d6822d84b1cda8f732434d15ece5b1e74932689dbf12aabe885d6e8b06a45e237731720fb1c4e1a852fea2873c69a797c1666f6da7df38cfc3fd", 0xdc}, {&(0x7f00000004c0)="073f634b47abe7fdf6035cfed6f742b18cb8bccc0e0a2266e0f0b1ac10a9b39ad2fd0854d0e9ee94c8f719b88f68885ba232a9702e3fce87f48f0def1830a5ec66885ce9aa04cce98ce07879fc0449ecc491137c73f922896837cfda4d02522ebe129dbda07fece4a7b6e74107d246943a390a9d22589b13c88404ae1a933ab899b7af4b4787f7052c39d66a94ca8f4da7d091a1036b56dab66863b873fecec04d97f4022270e986b7d715a3469798048d9ba9cc2f2ece8a8860cfce49fd24", 0xbf}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}, {{&(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000005c0)="896bfad62633fee9d231f2e1385f6cf6bf25cd65023f457695a2aa415279f359533725b76ae1204a24922df1bf827f797f842a08547b2e446054a5beedeeaee5a6e8ee4715d652c78cda39016731bab16eae577f14bac24361c3518bc72981569bff97b3ccb627a263856c7f47d4affaaadc7f7a43be93047c8db39c8b86a2684aa54526a2", 0x85}, {&(0x7f0000000680)="125f18654777468ff26bb20fa08bb23c33354a2ccb3c9f9f514098b6ffd0b4c5275a7c66761766828a3bcd01c029a161c076041aa9f208cc82b43020d0ad69b52e6cd58e340bfb6c440992feab4de4ea13e8bbd279c2389fe600e8e2c01f91e65039ff2dafd209068d97a0f1470a1ecc17aa42875f51b9f752eff618cb4e3f150ba6e0a19882190efe7763c9008a1ae4dc33741a471892f63a3f65", 0x9b}, {&(0x7f0000000740)="3481e44485a64314a734b74168d8d17c1c134943ecd273929fb01aab6d21efeac5a00e7d6dac013841b2b390f17f93a55b52ba1c84e4062e3a27120b73b38feedf7aa8e40f9fca6416da1a93f9d0677120d1c59c4b8637d9e9b6e3321fcf46ac6f77e56112b14ac70185aa9cf888b43231a0153c8f11a83af033e63a47a505d4a60d059878e52cac6accaa884e96088d052cffa8f970cfe2730d38290718e7b2999ece339f53a181", 0xa8}, {&(0x7f0000000800)="333c55efa63c", 0x6}, {&(0x7f0000000840)="72aa7fa5ab3970734d7c5e85ef38c5206866764568ed5d9c0ae73b3905e0c8c2b3dbbf697d8c4f3f5d820e24cb53a1c049f5c4e245cac5193fa557060e68585bf4d3642a0fd5f7c5314e6f3104e3bcba21733085bd1cb8b97615e3b1198efe50dc6dace4950f0fcd8b75de348bddfe38c0acc5020d24cb3589835a37743480d77e8fc21bbecb1dad6618b2928e2d83acfebc447225f94ce07175f2d565751d52266119bebd6912404b63b187bc4463f38e0a08b652683a0e", 0xb8}, {&(0x7f0000000900)="75f0cfcb8a2000a0f8aca86e98e40e5f06f9be7a4e3ef64363eb5ee23eba5c5fc81807d156233f0fad0205cc413c1b4d302f68b16b2741447fdd1ee9b8a34bd77bb6162b81cf2bd943ea", 0x4a}, {&(0x7f0000000980)="5ade0670414feea91eba22c6359ea52383ee0810c1226e0f4c33a215e4ba2ef5530ab7efff2c3a44282af225ec08c81d401dacb0868bcaa5daf2e7cdafc77ef53a0f52c0bc3dd42eea28df", 0x4b}, {&(0x7f0000000a00)="df89c3dc9b541b18cc778c9a366925a31da19c3634749769c8fd7e8b40b5ea23a6b0bed280fd00a38841c01ffd7ffa5f14c24e55d19a4c80da61791711dc29bc43817767a3cc766b60f8c746d5d6685f38b2ac", 0x53}], 0x8}}], 0x2, 0x20008000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="7800ab5f387e8bfe6a56601877b4ba59b48750", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 07:13:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1002d, 0x0) 07:13:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 343.824796] IPv6: Can't replace route, no match found 07:13:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setfsgid(r1) 07:13:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1002e, 0x0) 07:13:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x4008040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x5c1400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000880)={0x0, 0x0, 0x3f}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x3, &(0x7f0000000040)) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) write$FUSE_DIRENT(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x7c, 0x12, &(0x7f00000001c0)={0x77359400}) [ 344.554296] IPv6: Can't replace route, no match found [ 344.579642] selinux_nlmsg_perm: 237 callbacks suppressed [ 344.579658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 07:13:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:19 executing program 4: timerfd_create(0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x8, 0x64, 0x8f4b, 0x6b1d}}) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x3}}}, 0x84) [ 344.681980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 07:13:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) [ 344.742159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 07:13:19 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0x0, 0x4, 0x3740d26f, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4041, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/137) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x4a}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x567) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 344.812093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 07:13:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 344.862030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 [ 344.875519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31780 sclass=netlink_route_socket pig=14231 comm=syz-executor.2 07:13:19 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000000000003800000000000000001000000000200001"], 0x2d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 344.921899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 [ 344.979038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 [ 344.986819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31780 sclass=netlink_route_socket pig=14231 comm=syz-executor.2 [ 345.025763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14209 comm=syz-executor.0 07:13:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10030, 0x0) 07:13:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:19 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) quotactl(0x2, &(0x7f0000000000)='./file0\x00', r8, &(0x7f00000004c0)="a9048fd0538c5f2602a6cbe186e98883ee08fe63af746f875d7c400b3f0542ee47a1afda3469b34084f86695047a940e1fb7045fc8746f334ac51f69c84fd8977f5c8aad16395b1ca5b18bed15e2d119d4d624ffe2af2434eb6c466f7b52db13") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r2, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) [ 345.254853] IPv6: Can't replace route, no match found 07:13:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10031, 0x0) 07:13:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 345.572834] IPv6: Can't replace route, no match found 07:13:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'dummy0\x00', 0x80000000}) 07:13:20 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0x0, 0x4, 0x3740d26f, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4041, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/137) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x4a}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x567) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:13:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10032, 0x0) 07:13:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000027d4070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 345.964569] IPv6: Can't replace route, no match found 07:13:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10034, 0x0) 07:13:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) socket(0x10, 0x80002, 0x0) 07:13:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x1204, 0x30, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{0xe0, 0x1, [@m_sample={0xdc, 0x1d, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x6, 0x3, 0xc0000000, 0xff}}]}, {0xa5, 0x6, "73682ee5c8574f259e353783aa75d846b2157a246604cc37c8d3f779903887d6831dc058a88ee0b4c3eb955885bc1ef64f5fb3824b27fc2ce3b50cf3e8b34ba2ffecfd6c741fa29fbb66b214d045759cbb0e4a8e0c1b0dfddd176e36d46903b30e8afa97176321101199499fda2afd46a04c328b2ee36e16b4b4bc65e38e14cc3e7a28306c59c2cf46ae924d01304f580f6524fc87e0d4f44071dcf79b96500216"}}}]}, {0x1110, 0x1, [@m_pedit={0xff4, 0xb, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xfa0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x80000001, 0x800, 0x20000000, 0x101, 0x8}, 0x6, 0x7, [{0x2, 0xffff, 0x1000, 0x401, 0x0, 0x8000}, {0x1ff, 0xb2, 0x1ff, 0x6, 0x0, 0x9}, {0x8, 0x8000, 0x4, 0x0, 0x80, 0x40}]}, [{0x3, 0xf2c0, 0x3, 0xffff851f, 0x7fff, 0x9}, {0x80000001, 0x8, 0x5c8, 0x582, 0xfffffff9, 0xcaf}, {0x4, 0xfffffffb, 0xaf7, 0x1, 0x0, 0x1}, {0xfffffffa, 0x2, 0x6, 0x100, 0x3f, 0xffff8001}, {0x3, 0x5ad, 0x6, 0x8, 0x1, 0x4}, {0x40, 0x0, 0xc0000000, 0x8, 0x4, 0x2}, {0x80, 0xd46a, 0x5, 0x40, 0x3, 0xef23}, {0x0, 0x2, 0x100, 0x3, 0x5, 0x80}, {0x1000, 0x7, 0x9, 0x50, 0x10ccb2d5, 0x1}, {0x1f, 0x9, 0x2, 0x7, 0x3cb}, {0x3, 0x3, 0x0, 0x4, 0x80000000, 0x80}, {0x10001, 0x7, 0xfffffffe, 0x6, 0x1, 0x2}, {0x400, 0x8, 0x2, 0x2, 0x4, 0x4}, {0x8, 0x7, 0x200, 0x3, 0x7f, 0x8}, {0x101, 0x39, 0x2153, 0x8, 0x17, 0x4}, {0xffffffff, 0x3f, 0x20, 0x80000000, 0x1894d88e, 0x6}, {0x20, 0x2, 0xe2ca, 0x10000, 0x8, 0x8001}, {0x5, 0xfff, 0x0, 0x5, 0x33bb, 0xbda}, {0x0, 0x4, 0xfff, 0x400, 0x9, 0xffffffff}, {0x101, 0x1, 0x6, 0x3, 0xc8, 0x20}, {0x1, 0x7, 0x7, 0x3, 0x9, 0x2}, {0x1, 0x7fffffff, 0x10000, 0x0, 0x1f, 0x279}, {0x5, 0xff, 0x5, 0x401, 0xffffffc1, 0x9007}, {0x1, 0x0, 0x592, 0x7, 0x4, 0x7fffffff}, {0xaa, 0x9, 0xdf3e, 0x66b, 0x8, 0x8000}, {0x0, 0x9, 0x9, 0x1ff, 0x4, 0x8}, {0x0, 0x1000, 0x0, 0x3, 0xfff, 0xf69c}, {0x4, 0x0, 0xfff, 0x5, 0x9}, {0x10000, 0x2, 0x7, 0x40, 0x8, 0xffffffff}, {0x6, 0x2, 0x400, 0x2, 0x8, 0xccce}, {0x3ff, 0x1, 0x4, 0x80000000, 0x4, 0xfffffffd}, {0xb3f, 0x8001, 0x0, 0x80, 0x50f, 0x3}, {0x2d2ce6fd, 0x1f, 0xfff, 0x9d62, 0x2, 0xffffffff}, {0x1558eb8e, 0x1, 0x7ff, 0x2, 0x7, 0x2}, {0x2, 0xffffffe1, 0x6, 0x1, 0x380000, 0xffffffff}, {0x2, 0x0, 0x10001, 0x9, 0x4, 0x1f}, {0x7a0a, 0x7a6c, 0x7, 0x41a, 0x7, 0x26}, {0x2, 0x1, 0x8, 0x8, 0xfffffff9, 0x100}, {0x7f, 0x400, 0x7ff, 0x10001, 0xfff}, {0x80000001, 0x4, 0x9, 0x2, 0x9, 0xae6}, {0xffff8001, 0x0, 0x6}, {0x4, 0x0, 0x2, 0xe001, 0x10001, 0x3f}, {0xed, 0x1b, 0x1, 0x7fffffff, 0xae, 0x7}, {0x920, 0x1ff, 0x8, 0x6, 0x0, 0x2}, {0x8, 0x8, 0x97c9, 0x2, 0x1, 0x81}, {0x2, 0x4, 0x3, 0x3, 0x7, 0x57a}, {0x2dd, 0x1, 0xe3e3, 0x1, 0x2}, {0x2, 0x4, 0x8001, 0x0, 0x3bc, 0x1}, {0x3, 0x4, 0x3, 0xfff, 0x8, 0x1}, {0x0, 0x1, 0x7fff, 0x9baa, 0xfffff9f1, 0x4}, {0x401, 0x2, 0x2, 0x4, 0x8, 0x7}, {0x2, 0x6b2, 0x8, 0x9, 0xfffffffe, 0x7}, {0x69c, 0x4, 0xfffffffe, 0x7fffffff, 0x9, 0x1afe}, {0x6, 0xfffffffa, 0x3, 0x3, 0x3258, 0x9}, {0x9, 0x7, 0x3f, 0x5, 0x2, 0x1ff}, {0x0, 0x0, 0xffffffc1, 0x1, 0x5, 0xe3df}, {0x6, 0x1, 0x6, 0x3, 0x80, 0x5}, {0x0, 0x9, 0x0, 0x4000, 0xc0, 0x6}, {0x8, 0xaac6, 0x400, 0x4, 0x8e, 0x7}, {0x30000000, 0x0, 0x101, 0x9, 0x401, 0xff}, {0xd4, 0x1, 0x1, 0x3, 0x10001, 0x9}, {0x6, 0x80000001, 0x9b, 0x81, 0x1ff, 0x2}, {0x2000000, 0x6, 0x24, 0xde2, 0x7, 0x3}, {0x8001, 0xffffffe0, 0x9, 0x7fffffff, 0x10000, 0x8}, {0x8, 0x6, 0xdb27, 0x1, 0x8, 0x4}, {0x0, 0x6, 0x9, 0x0, 0x7, 0x3}, {0x80, 0x1000, 0xc8, 0x3ff, 0x8, 0x790}, {0x81, 0x100, 0x8, 0x993, 0x10001, 0x6}, {0x1, 0x800, 0x80, 0x2, 0x8, 0x7}, {0x4, 0x2, 0x4, 0xe9c5, 0xfffffffa, 0x5}, {0x2, 0x901, 0x800, 0x1, 0x1, 0x1}, {0xffff, 0x20, 0x5, 0x6, 0x10000, 0xffff8000}, {0xfffffffc, 0x8001, 0x5, 0x7fff, 0x6, 0x1}, {0xffffffff, 0x3f, 0x4, 0x9, 0xffffff51, 0x7fff}, {0x3ed5e28f, 0x9, 0x100, 0x2, 0x0, 0x7}, {0x8, 0xb5, 0x3f, 0xa9, 0x3ff, 0x2}, {0xffffffff, 0x0, 0x7fff, 0x4, 0x7, 0x18000}, {0x7, 0x3, 0x7fffffff, 0x3, 0x4dd1cf88, 0xfff}, {0xff, 0x0, 0x449, 0x2, 0x0, 0x1000}, {0x1000, 0x8, 0x80000001, 0x2, 0x6, 0x3}, {0xfffff801, 0x80000001, 0xc993, 0x9, 0x0, 0x1}, {0x69b9, 0x0, 0x5, 0x9, 0x1, 0x5}, {0xe9bd, 0x7, 0x8, 0xd8, 0x7, 0x34}, {0x6a, 0x6, 0x8, 0x9, 0x9, 0xbc18}, {0x2e, 0xfff, 0x8, 0x7, 0xa9, 0x2}, {0x9, 0xee9, 0x1, 0x400, 0x5a61aed5, 0x14000}, {0x4, 0x69e5, 0x1, 0xed6, 0x4}, {0x5, 0xfff, 0x9, 0x8, 0x3, 0x8}, {0x9, 0x3, 0xb6e1, 0x1f, 0x101, 0x7}, {0xffffffff, 0x1, 0x4, 0x5640, 0x200, 0x8}, {0x5, 0x1ff, 0xfff, 0xe9, 0x1, 0x8001}, {0x3, 0x5, 0x6, 0x0, 0xab, 0x3481}, {0x8, 0x0, 0x867c, 0x401, 0x39, 0x1}, {0xfff, 0x40, 0xd8c, 0x3, 0xff, 0xfffffffb}, {0x1, 0x8, 0x9, 0x1, 0x1, 0x1}, {0x7463, 0x0, 0x1, 0x3f, 0x1, 0x1}, {0x0, 0x10001, 0x40, 0xa1, 0x1, 0x5}, {0x1, 0xf27dc0f, 0xee, 0x1, 0xeb3, 0xffffff01}, {0x1, 0x1, 0x7, 0x4, 0x3ff, 0x5}, {0xffffffff, 0x401, 0x101, 0x200, 0x7, 0x200}, {0x7, 0x0, 0x3ff, 0xc595, 0x5, 0x1ff}, {0x1, 0xf3f2, 0xfffff801, 0x4, 0x0, 0x1}, {0x2, 0x400, 0x0, 0x0, 0x101, 0x8}, {0x7f, 0x3, 0x7, 0x28, 0x80000001, 0xf6}, {0x3f, 0x9, 0x1000, 0x4000, 0x7, 0x4}, {0x6, 0x3, 0x842, 0xcfc4, 0x66, 0xfffffbff}, {0x79, 0x3, 0x5, 0xfffffff8, 0x5b, 0x6}, {0x2, 0x9, 0xfffffff7, 0x3ff, 0x6754d8ad, 0x4}, {0xe76e, 0xff, 0x6, 0x7ff, 0x0, 0x3ff}, {0x200, 0xfc81, 0x6, 0xfffeffff, 0xfffffffb, 0xfd8}, {0x4, 0x6, 0x1c, 0x7, 0x5, 0xa26}, {0x6, 0x5f, 0x0, 0x7, 0x3, 0x17}, {0x8000, 0x7fffffff, 0x100, 0x7333, 0x1f, 0x3}, {0xff, 0x8, 0x9, 0x1ffc000, 0x3, 0x60e}, {0x5ec, 0x5, 0x81, 0x1, 0x5}, {0x73f9, 0x9, 0x7e6, 0x3, 0x1, 0x3}, {0x5aa, 0x8001, 0x1ff, 0x5, 0x8d, 0xad}, {0x0, 0xffffffff, 0x8, 0x4, 0xfffffffc}, {0x5dd1, 0x5, 0x8, 0x2, 0x1000, 0x1ff}, {0x7, 0x8, 0x845f, 0xbab1, 0x20}, {0x10001, 0xb853, 0x1, 0x9d70, 0x1c6, 0x80000000}, {0x1, 0x4, 0x3, 0xc57c, 0x2, 0x6d0}, {0x9, 0x7, 0xb56a351, 0x7fffffff, 0x800, 0x1}, {0x6, 0x8, 0x5, 0x80000000, 0x0, 0x3}, {0x998e, 0x1f, 0x0, 0xc0, 0x10000, 0x800}, {0x3, 0x3f63, 0x6, 0x3, 0xa857cb3, 0x9bc51a}, {0x3f, 0x101, 0x9, 0x6, 0x400, 0x9}, {0xffff, 0x8, 0x0, 0x10000, 0x5}], [{}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0xe224493443b5a}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x478ddc7964065247}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x291db630606ada5e}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {}, {0x2}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x6, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x41, 0x6, "9d59156ee894de0056c4d01662ce74add34da9e470f673fecb261cd520372769d11a989f6088a77435fc0c4e9fe1d9036f4f3095d35ff656ebc35aa975"}}}, @m_bpf={0x118, 0x1c, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xf1, 0x6, "e3e7551dd4a16359f5de7f216b27c78966060a398f6ddbb8cc2310ee504d63df702f17bca7e1a234f4b113788fc4f2308ed2f6097891ee02f8e9ba8cea09004d902bb9714789bc5d11a36ee20b9494346b1b393fcaeec0fabd72855b799ce78057a7555f2a0eded02c00fb6f45a332f92cb30ef4f9e808b7c6627cb3de7831541ee6cb985104b79fd7fa6695dbfe4d70fd252b31580034a0c710dcd212179d2272f27a45ae56d5b7201cd35529f1e0a4b48ec41da5603491c395140cba1eb322828d5e3f26922e4a802786e244391d9858bf2dd48319a36aea2b5aa41649f3d35ecfe409dc51d6c81325bde88f"}}}]}]}, 0x1204}, 0x1, 0x0, 0x0, 0x40}, 0x8040041) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 346.207744] IPv6: Can't replace route, no match found 07:13:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="33ccf74c"], @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYRES64=r4, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES32=r0]]], 0x3}}, 0x0) 07:13:21 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0x0, 0x4, 0x3740d26f, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4041, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/137) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x4a}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x567) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:13:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10036, 0x0) 07:13:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) [ 346.848253] IPv6: Can't replace route, no match found 07:13:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) 07:13:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1003a, 0x0) [ 347.128417] IPv6: Can't replace route, no match found 07:13:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:13:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1003e, 0x0) 07:13:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB="dd2ca6fd3e577d7b2617977295f1b19e8225d9ea81cc6585525cef15539e786237d68f0963aa99a7d300afa7fcdd640008c0401c48da91a5c0d78bfe7cb306a60cc73be8d0e5fc5601867f3a0ebd2f1130dffecb9fc9cc3346dffbca6ad87c6f69a713c38c0b91d92cee2688a16a55d98dfbca325f775b44f1dd5dcbfa2167a509bfff13277552c335f35d0f9045877e6a0642fd55118120b4f49a5f959d61e30ff3c9d44d79524ffd500c240037fe2a860c9e623847ccbefd17c0486f92f0f53b3052ed2878f0dde1238be90e901ab4b18b37910325b593e6ac356b672c24137f7fec8d7f56bf0a01f9810e2c6806f0d834670778d96b3dabff1cdc0831775e761597d26d2fd088f0f01e4677e3242405d144d8001b4c8753bc5501f0b215682ebc0a020e49dd9b", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) r8 = getegid() stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) r12 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xfef0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000003c0)=0xd) write(r14, &(0x7f0000000040)="e0", 0xfffffe00) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000003c0)=0xd) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r16, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r12, @ANYBLOB="0402814eb103963a41e8e3b798ac8a2e34139e9f7822bfd621cb776075c66a67ead8e20c5f8410f1915c29d65aa9cc1e8c2f44a20e63a0ff3a3b10422dd03a0c3558ee1ff48e19c7554b07c9f5acca1024d3363be9edaaa59e8c737d0d02ce8bb8be185c1e7814026c9f8885be28bef09b1b492cbb35aa7464d91d", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r16, @ANYRES32=r14], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r13, @ANYRESOCT=r15, @ANYRES32]]], 0x7, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='fuse\x00', 0x21002, &(0x7f0000000800)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x35}}, {@allow_other='allow_other'}, {@blksize={'blksize'}}], [{@uid_lt={'uid<', r9}}, {@uid_gt={'uid>', r11}}, {@euid_lt={'euid<', r17}}]}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2, 0x0) r19 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0)='NLBL_CALIPSO\x00') r20 = open(0x0, 0x0, 0x0) fsetxattr(r20, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) sendmsg$NLBL_CALIPSO_C_REMOVE(r20, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)={0x64, r19, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0xd8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x86}, 0x800) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="5d0c31933dc5656f15ac87118460e5b0", 0xfffffffffffffd73) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r18, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r18, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r21 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r21, &(0x7f0000000140), 0x332, 0x0) 07:13:22 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0x0, 0x4, 0x3740d26f, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4041, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/137) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x4a}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x567) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 347.390144] IPv6: Can't replace route, no match found 07:13:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000247c74270cb5fbbb4b2ab600070500"/30, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) 07:13:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10042, 0x0) 07:13:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 347.693655] IPv6: Can't replace route, no match found 07:13:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10043, 0x0) 07:13:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:22 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x39}, 0x7}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$tipc(0x1e, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4}, 0x60) [ 348.081659] IPv6: Can't replace route, no match found 07:13:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10048, 0x0) 07:13:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000080)) dup3(r0, r1, 0x0) 07:13:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000c00000000000000", @ANYRES32=r3, @ANYRESOCT=0x0], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 348.291302] IPv6: Can't replace route, no match found 07:13:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10049, 0x0) 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 348.468770] IPv6: Can't replace route, no match found 07:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x3, "a984283a6dba1c1c"}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f000000000008a4c423c7e3fd73cf3ffb5861ab13fe2f5231620df3d98b2b7cc47f9fb0e75974b9d7d3bbab76225746cc5163ad3508baa7da3be6dd7d1bc8493a9b62a67a15b80669f66626982837579eeceec21e796bf33dd3e1576989d8a67935ba997eb8b85505ca0ce6f1814e00e4f4dc0b281f5faf36686ce72734179b3557902e29cc682809f41132aee60351c3f5c58fd9c1776916937f5d3e33a4bbea304af01ad49cf940d0cbb2c0"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="aef7ffffff000000004310df29080001000280150098280200e200"/41], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1004a, 0x0) 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 348.605449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="56d1630000555e7057e1ea07517919a21fa5f8695e6386442d2b13f50b5983e847d7c2350e1b13ab594456da8400f5fb75a10000000000d77ac0c34f57843e7e522447e77bf4cec58c21cf8bef7351767cd5412e6aee9623b5f62bbd4d2ff6657b15dd607e9e61f1ba94497fcecc8b106d0a2bfa8f2b546c69efa165cb0fa41fd1ddc5739b1300ac435430c054d167569bfc3fa8679f0a51dcf02525331f6668fb8bb6886b13e63bf238f39895246efa203a3e0ccbd77abeca204334df28875fac8974a9b7f07c0575e1e3f2facec273276e7efed0c169a4a5e829dc141f3a13ea41aca3faba5c703a86c86491af0f361a08c769ad74f3a7076858628dbf87de17c11176075588c9b04308381fcd952268d45d51bdadf8cb7c9b87c2144fa2eb82f3136c8f094076807def9ae6c1de9301776976993aa3b2a45fc094b31b8c5987bac141e7134c891bdb64809f65999632e8805e49f11a23351eb77fb508321b6e"], 0x161) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) timer_gettime(0x0, 0x0) timer_getoverrun(0x0) 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 348.679067] IPv6: Can't replace route, no match found [ 348.703976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 348.909679] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 348.926885] FAT-fs (loop3): Filesystem has been set read-only [ 348.940204] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 348.951375] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 07:13:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1004e, 0x0) 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 348.967178] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 348.979557] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 349.029084] IPv6: Can't replace route, no match found 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000004c0)={0x1000, &(0x7f0000000480), 0x5, r2, 0x9}) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={r4, 0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000440)={r4}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000540)={&(0x7f0000000500)=""/46, 0x2e, 0xffffffffffffffff}}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = dup(0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r7, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x30, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0xfffff298, 0xc3, 0x3ff}}}, ["", "", "", "", ""]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r6, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 07:13:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1004f, 0x0) 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xb72}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)=0x2000001, 0xfeb4) sched_setscheduler(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x2120) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x224902, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c004) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r3) fcntl$addseals(r3, 0x409, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7, &(0x7f0000000280)) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r4, @ANYBLOB="00ede83933d4f01d97b9ffbef5a4361f96bca60cde3b2093b07d1a0f6bc0a05cfb81811981ba7050ebd6be050296c4639d8dc7b30736ace8dbd420bb38a760245083037ffd26499e96cdd8db7ca901c6daa8eaa909beee4bd9e1f49462873c80096d09ab2f41e28a00000014000000002360f4b015098daacd14405ce40ecb0545cfe34ea91d48ffffffff00000000ea854dacc89e70316075055132239c5ebd726318a2", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRES32]]], 0x7, 0x1) ioctl$VFIO_SET_IOMMU(r5, 0x3b66, 0x7) 07:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x3) 07:13:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 349.245005] IPv6: Can't replace route, no match found 07:13:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10050, 0x0) 07:13:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @loopback}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 349.474751] IPv6: Can't replace route, no match found 07:13:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10051, 0x0) 07:13:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x20, 0x1f97, 0x0, 0x3, 0xfd49, 0x6}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 349.679706] IPv6: Can't replace route, no match found [ 349.733146] selinux_nlmsg_perm: 243 callbacks suppressed [ 349.733163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.791993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.808536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.822856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.847406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.860574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.893851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.906766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.920313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 [ 349.934246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14513 comm=syz-executor.0 07:13:25 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r0) 07:13:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:25 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000240)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = semget(0x0, 0x0, 0x182) socket$l2tp6(0xa, 0x2, 0x73) semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f00000003c0)=""/250) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000680)={{0x6, 0xc1}, 'port0\x00', 0x10, 0x100429, 0x800, 0x1000, 0xe8, 0x80, 0x2, 0x0, 0x0, 0x1}) r5 = gettid() kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = getpgid(r5) sched_rr_get_interval(r7, &(0x7f0000000380)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES64, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000647f7db406000000000000000000005c105b3b94000053980d34c8b0f9c94205ae224a2e3bdc734443c93f3862b0bf76f23b1d8a2cea54463a36063e76fb30a73a747f172d56af1e6f5cc42e55ccadda407062a2e881ebd1895d706ca32057411ff151d645debfdf9b610420db3fb5c9ff76acfea168750f760f27ca090c65f23fa07895a271599495a04fb128f64d5df458c0cdef819a6ec0e7b0afff94b88dbb3cc92c0d5aad5a39024077f3e3bd36ab895a00fb7f471d9731fe1408506b6f7d7758711f43648efa4937a702ae2e80993b4219a677b1085ac7dfcc3231e6e55219ab7adc49b40282ccb5e6fba39fe28120be80f401c00c8615bd203ac5cf663ceb7c9c584661382d2cbb78b32050507c1ef42ff50644425493f6eb3bbef74091a9e33030228ef2980ecb2daeaac0379c2b2a0e46400395316d8cfaf79da1280d32c2b95b36881fab2b3c5583d5e25adaf2e547599acceb03846b310814dfe0d4265dcbd2d83228caaa214c181e175f66f749", @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df290800d8addb19ab"], 0x38}}, 0x0) r8 = dup(0xffffffffffffffff) setsockopt$packet_int(r8, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r8, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) read$usbfs(r8, &(0x7f0000000300)=""/126, 0x7e) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 07:13:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10052, 0x0) [ 350.726775] IPv6: Can't replace route, no match found 07:13:25 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x354, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 07:13:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10054, 0x0) 07:13:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:25 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r4, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRES32]]], 0x7, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4f7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x284}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8133}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) r9 = dup(0xffffffffffffffff) setsockopt$packet_int(r9, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r9, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000003c0)) ioctl$TUNSETGROUP(r9, 0x400454ce, r11) socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r14, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r15, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r15) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r16, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r16) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r17, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r17) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRESHEX=r15, @ANYRESHEX=r12, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="e19496e8b1376bd1c2269e29e8c7edc805add89784344ac38bc05f40bc7869feb57d7ea407228106c47db6ae1678dbb609a4ec0a6f27fe2ca7946cde93d0d1f3d2b7f2076b1f7a1e0f9a98cc38778665e4a1925874071093cf2d6b9f72ca57c23e1720f9e708ccda5b3f18a79590", @ANYRES64=r11, @ANYPTR, @ANYPTR64, @ANYPTR64, @ANYRES64=r16, @ANYRES16=r10, @ANYPTR], @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYBLOB="c0c8601d3896aa89e395ee90d14a821be0eabb3518642942aba64c", @ANYRES64=r17, @ANYRESHEX], @ANYRES32], @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x3}}, 0x0) r18 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r18, &(0x7f0000000140), 0x332, 0x0) 07:13:25 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000480)=0x7fe, 0x4) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) [ 351.084059] IPv6: Can't replace route, no match found 07:13:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) r0 = socket(0xa, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000cf7000000000000095000000000000007c41776586b2841fb71916411c22f945fb70fc5b4e982e61d68b61c1ba6e53657b8dc7c5bb72000100001bc6470051a39eab7f86e711b7bc5e5c45d8cfc8c575b46ecea5a34655b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6c51cc11505e90fbda60000000000e9c303f25e537231"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 07:13:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 07:13:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10055, 0x0) 07:13:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 351.419509] IPv6: Can't replace route, no match found 07:13:26 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000240)={0x0, 0x0, 0x7fffffff, [], &(0x7f0000000180)=0x2}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5e, &(0x7f0000000280)='ppp\b\x00L\x1b\x9a\xc9\xb3~\xa0\xa2\xc8\xf4n\xa7\x92\xc34\x9e\xefx\xcfOs\x9bhQ\xa1}$\xbe\xab\xd8\x02\x0eK\xd4e6\xea\x13\x8f\xa8\xf3\x00\xbf\x85?6\xeb\xf2\xf96\x145\xce\xcb\xdf\xafN\x83IF\x1dQ\x9d\xf2\xd7\x19|\xdf\x1e\x92\x805\'C1X>\xc9\xdd\x17D\x8d{\xfb\x93\xe2\xf3s\xef'}, 0x30) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000004c0)=""/234, 0x10000, 0x800, 0x22, 0x3}, 0x20) close(r1) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @ethernet={0x6, @broadcast}, @nl, @hci, 0x80, 0x0, 0x0, 0x0, 0x970, 0x0, 0x0, 0xffff, 0x1fc}) r4 = dup(r1) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f00000000c0)={0xecc, r5}) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, 0x6, {0x3f00000, 0x0, 0xffffffff, 0x10000}}, 0x20) 07:13:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = dup(0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c008ec994812d63ef9d200000000000", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 07:13:26 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) open_by_handle_at(r1, &(0x7f0000000180)={0x86, 0x3, "a6a95b2cf2261e8204f897f0c454f01b5ba87670d62cfe4ea074530e4f2a0ac672b90b91fcc6afbee40f0904d1df4b87947596a7fb7ae4549b2f13bfcd6b472422253d474c73cfd9dbfe6dc7a6f63e856ad782998ed2fa66fee9a3feb868ce955e90b48f1d65b62aaf88d5c7141730f830b96f59d795051d1863684f9304"}, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}}) r6 = dup(0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r6, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000100)={0x9b0000, 0xffffffff, 0x200, r7, 0x0, &(0x7f00000000c0)={0x9e0001, 0xfff, [], @p_u32=&(0x7f0000000080)=0x1}}) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x1bf) 07:13:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10056, 0x0) 07:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 351.685677] IPv6: Can't replace route, no match found 07:13:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080), 0x4) 07:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10058, 0x0) 07:13:26 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYRESDEC=0x0]], 0x7, 0x1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r11) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000180)={r11, 0xffff, 0xdba, "23d931051bb816cd38e20fbff6809e607566d6c9ba1bd4ea03190747799c0ab2956b1b6904e16910d5e37059ee451fc4f85610ac723331bf176324f9191353dcdf4e618807fb518c61bee3d0d3e87956b1b617f2a1075a8d1d1c125230444eb5102a97016f637ecbd62e78374fa77767de11298fa46690"}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x0, 0x0) 07:13:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) 07:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 351.908370] IPv6: Can't replace route, no match found [ 352.053920] team0: Device ipvlan1 failed to register rx_handler 07:13:26 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x3020) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000080)=""/90) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000000)=0x9) 07:13:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080), 0x4) 07:13:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x2a00) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) fcntl$setown(r3, 0x8, r4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0xd, 0x80000, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10059, 0x0) 07:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080), 0x4) 07:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:27 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 352.940542] IPv6: Can't replace route, no match found [ 352.947931] team0: Device ipvlan1 failed to register rx_handler 07:13:27 executing program 3: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000008ff93961a00900b00cf5d2fcddfd8b0bb7e6a1a6f5e6f5d5e77d19d4d469654036061a00009038d00d5873ea94b080110a07242f79399a169a7715931be87aeaa6f8a2a4f2dd7b912685826d364ef5c882d055a1f7f878000036f56f6a85f565c55a00d2d3bdcac52f68e1eb33b6cf33bfb4d50fabfdcd973defff82dbd5b24cc63b01087f1f068626b7fb6842dff96d5a73ed269336320eae54084080331cd95a3aba18f1000000e4ffffffffffffff00"/201], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x54480, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}}, 0x0) close(r1) shutdown(r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x80}, @timestamp, @window={0x3, 0x4, 0xfffd}, @mss={0x2, 0x3}], 0x6dd9207777e1726) sendmmsg(r3, &(0x7f0000004b40), 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39bca59f8c40649e3eb79d8745797b308edd84adef35ad9d8a17240f38f5a8f8c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d921442b0a06b135f8a73b68486ba1a76f256f50ae7cb980e69e7580b9f11c6ede4210f23240559b8c428900d7ce7862417ab5a50e494b2a54e346d7efa008ccef06813e235b446788ac0f1df3c65bc1fb5393364a2efd284640ec2c438ad2b24a69f1f9da0000005ef0982c0000000000009eee6a9283bf253ca4"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getroute={0x1c, 0x1a, 0x404, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x0, 0xff, 0x4, 0xfd, 0x8}, ["", ""]}, 0x1c}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 07:13:27 executing program 5: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x2) 07:13:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x1, 0x0, 0xf}, @sco={0x1f, @fixed={[], 0x12}}, @ethernet={0x306, @remote}, 0x5, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='veth0_to_bond\x00', 0x1, 0x81, 0x8}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={0x0, @nfc={0x27, 0x1, 0x1, 0x7}, @isdn={0x22, 0x7, 0x3, 0x0, 0x6}, @can={0x1d, r3}, 0x0, 0x0, 0x0, 0x0, 0xd2c7, &(0x7f00000003c0)='team0\x00', 0x1, 0x2, 0x3}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:27 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1005a, 0x0) 07:13:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x29, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 353.288243] IPv6: Can't replace route, no match found 07:13:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000024000705000000000000000000000000a6f6daa0f0026f330bc3b61df6b68403ecdcd045bc102dbd4cfccad1932ed06c2cc45401c41d2103d6297b0897d647d21e71b7cd81c8ce27059f50b78b3a3d2cdac76de5ae44960080a394ae5aaeaafae828ee1b0d7f7421c03212fd797921439adb567fd6a3f2dcbd86ee078e620dc94fc95ee3f80cd5b0a2cae7354aead5cc", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) setxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'os2.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f0000000500)='md5sum\x00', 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380006cecacfd700000000000000846ebf146590f2055e00", @ANYRES32=r4, @ANYRESOCT=r1], 0x3}}, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000540), 0x4) r10 = open(0x0, 0x0, 0x0) fsetxattr(r10, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r11, r12/1000+10000}, {0x77359400}}) r13 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$TIOCOUTQ(r13, 0x5411, &(0x7f0000000300)) r14 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r14, &(0x7f0000000140), 0x332, 0x0) 07:13:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1005c, 0x0) 07:13:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x102, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 353.532221] IPv6: Can't replace route, no match found 07:13:28 executing program 5: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x6}) r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1005e, 0x0) 07:13:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:28 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = shmget(0x2, 0x2000, 0x200, &(0x7f00008ce000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x3f0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x2, 0xc, 0x4, 0x80000000, 0x2, {}, {0x3, 0x10, 0x3, 0xfc, 0xff, 0x7f, "4cc85b20"}, 0x3, 0x3, @offset=0xa8, 0x9, 0x0, r4}) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f00000000c0)={0x0, 0x24c22f46, 0x8001}) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x106, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 353.711137] IPv6: Can't replace route, no match found 07:13:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10060, 0x0) 07:13:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x107, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 353.940898] IPv6: Can't replace route, no match found 07:13:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002cc5564c9dea29e90000000000000000", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x2, &(0x7f0000000080)=0x1f, 0x4) 07:13:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x6, &(0x7f0000000080)=0x1f, 0x4) 07:13:28 executing program 5: socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x7, &(0x7f0000000080)=0x1f, 0x4) 07:13:29 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@caif=@dbg={0x25, 0x5, 0x5}, 0x80, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001880)={0x3, 0x101, "c20edc", 0xff, 0xbf}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x8deb, &(0x7f0000000040)=0x2) accept$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @default, @remote, @null, @netrom, @bcast, @bcast, @default]}, &(0x7f0000000200)=0x48) 07:13:29 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x3) 07:13:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10064, 0x0) 07:13:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockname$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xf) 07:13:29 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x23, 0x4) 07:13:29 executing program 5: socket$kcm(0x11, 0xa, 0x300) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x192080, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x7, 0xf}, 0xd8) close(r3) splice(r3, &(0x7f0000000500), r2, &(0x7f0000000540)=0x51, 0x7, 0x4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000005a078c90afcfa622816bbdbd6ea79c06153be9f0b091f8a6d15903d28d5586e108a619d0a9a8909958327cf468af99eb360c30214c7997938671c3a67cc97c63198a6e611f78fbf5e0700000083c524ce947f75330eb9d08e2cd9df5bfef775c5220cf241a284d15d7b4da9216e348040d3f9dd5c1e100ec17a845ba7be886860af6db9357d4cdb938c90e80000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r5, 0x8, 0x1}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000340), 0x0, r6}, 0x68) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r7, 0x21, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 354.569575] IPv6: Can't replace route, no match found 07:13:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:29 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000000)={0x2, 0x3}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:29 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xf000000, 0x8, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa20933, 0x8, [], @p_u8=&(0x7f0000000040)=0x6}}) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = open(0x0, 0x0, 0x0) fsetxattr(r5, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x5, 0x202, 0x4c5, 0xe0d, 0x0, 0x7fff, 0x0, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x8001, 0x5134, 0x10002, 0xf00, 0x800, 0x8, 0x7, 0x9, r6}, 0x20) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:13:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:29 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 07:13:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:29 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x44}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x21, 0x4) 07:13:30 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10065, 0x0) 07:13:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:30 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x11}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x40, 0x81, 0x2, 0x8001, 0x3}, &(0x7f0000000340)=0x14) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) r8 = accept4$tipc(r4, &(0x7f0000000440)=@name, &(0x7f0000000480)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f00000004c0)={0x1, 'team_slave_0\x00', {}, 0xf000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x2, 0x10}, &(0x7f0000000400)=0xc) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x101000, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xd) write(r11, &(0x7f0000000040), 0x0) ioctl$TIOCGPTLCK(r11, 0x80045439, &(0x7f0000000280)) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000240)=0x1) 07:13:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCOUTQ(r4, 0x5411, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x1f}) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:30 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) write$ppp(r1, &(0x7f00000000c0)="57eb4787121ef9cf55b4929b3f71c62408bb2db471cb5de9d95b1d92ed002526c1a4e07565205e7074cf3bd50015bcaef50a9d8e08c752eeecc34a2fae716463fb0182b6088fda0deef81f37361c89f4fc65f949f32e7dc5ff51290f68881b2518b1330f3bece250904d66d7dfddfd05e3fa9357aa3ffdb6d76fa97d443f4898b1cd66b547fbe428a61dade18182c082e40185f4081a124e4461f776c0c8374d310c7bcc1ebdafaf156b5604532d", 0xae) 07:13:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 356.184024] IPv6: Can't replace route, no match found [ 356.189845] selinux_nlmsg_perm: 174 callbacks suppressed [ 356.189860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.214776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.252173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.298438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.311882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.341924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.371865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.401906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.431877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 356.461926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14832 comm=syz-executor.0 [ 357.526898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.533905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.542557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.549294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.557428] device bridge_slave_1 left promiscuous mode [ 357.563864] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.575514] audit: type=1400 audit(1579763612.166:114): avc: denied { map } for pid=14848 comm="syz-executor.3" path="/sys/kernel/debug/kcov" dev="debugfs" ino=100 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 357.622502] device bridge_slave_0 left promiscuous mode [ 357.628061] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.686088] device veth1_macvtap left promiscuous mode [ 357.691440] device veth0_macvtap left promiscuous mode [ 357.697100] device veth1_vlan left promiscuous mode [ 357.702243] device veth0_vlan left promiscuous mode [ 363.114642] device hsr_slave_1 left promiscuous mode [ 363.166797] device hsr_slave_0 left promiscuous mode [ 363.222929] team0 (unregistering): Port device team_slave_1 removed [ 363.234267] team0 (unregistering): Port device team_slave_0 removed [ 363.244237] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 363.288095] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 363.351358] bond0 (unregistering): Released all slaves [ 363.390938] IPVS: ftp: loaded support on port[0] = 21 [ 363.451428] chnl_net:caif_netlink_parms(): no params data found [ 363.490217] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.496746] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.504803] device bridge_slave_0 entered promiscuous mode [ 363.512610] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.519052] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.526908] device bridge_slave_1 entered promiscuous mode [ 363.542021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 363.552963] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 363.603289] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 363.611052] team0: Port device team_slave_0 added [ 363.630908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 363.639168] team0: Port device team_slave_1 added [ 363.672447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.678731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.714447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.731393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.741073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.777670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.792559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 363.800485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 363.864409] device hsr_slave_0 entered promiscuous mode [ 363.901963] device hsr_slave_1 entered promiscuous mode [ 363.952725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 363.960123] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 364.088006] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.094435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.101083] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.107593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.189415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.207675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 364.226801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.238692] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.249733] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.270637] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 364.281188] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.300950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.316970] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.323448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.361264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.369335] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.375753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.384088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.392551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.404845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 364.411957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.419936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.433450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 364.442285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.450017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.461029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 364.468575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.476850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.488296] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 364.495238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.512234] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 364.519851] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 364.527412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.534562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 364.547875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.569383] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 364.581143] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 364.589081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.598523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.666721] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 364.674365] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 364.681127] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 364.692180] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 364.704537] device veth0_vlan entered promiscuous mode [ 364.710738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.719871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.733766] device veth1_vlan entered promiscuous mode [ 364.740305] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 364.749724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.757787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.765267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.780464] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 364.797209] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 364.808911] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 364.816356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.824549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.832689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.842850] device veth0_macvtap entered promiscuous mode [ 364.849856] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 364.861685] device veth1_macvtap entered promiscuous mode [ 364.868041] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 364.878857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 364.890984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 364.903155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.913052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.922798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.932885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.942634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.953010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.962344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.972441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.981637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 364.991389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.000731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 365.010602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.020892] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 365.028033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.036793] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.045497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.053792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.062355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.071733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.082992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.092255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.103163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.113791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.123647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.133658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.143548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.152715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.162508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.171704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 365.181417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.192667] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 365.199848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.207278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.215524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.303023] selinux_nlmsg_perm: 5 callbacks suppressed [ 365.303041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.320800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.333310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.346042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.358418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.370964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.385180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.397761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.410358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 [ 365.423720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14861 comm=syz-executor.3 07:13:40 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x1d, 0xffffffffffffffb4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:13:40 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x100) 07:13:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x8, 0x4]) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) getpeername$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@null, @netrom, @default, @remote, @rose, @remote, @rose, @rose]}, &(0x7f0000000080)=0x48) 07:13:40 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10066, 0x0) 07:13:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x0, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0xf, r2, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x0, r2) [ 366.118295] IPv6: Can't replace route, no match found 07:13:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:40 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60100, 0x190) write$selinux_validatetrans(r1, &(0x7f00000000c0)={'/usr/lib/telepathy/mission-control-5', 0x20, 'system_u:object_r:var_t:s0', 0x20, 0x1, 0x20, '/sbin/dhclient\x00'}, 0x64) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x81, 0x4) 07:13:40 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x100e0, 0x0) 07:13:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000001000000000000000000000000000000000000000040000000000000000000004f000000000000000000000000000000000000a5e1e0445497552e15500e42376ebd94a30f73f8ea82521f1820f37958787e6fcb76eca9b0a353d726817ca8c5cafa5f2cbcd1672e55f2b7df93eec7ed527a88c1a69d8ad1960a4d5f90828811fa11399e46447cf4f7620b075cfe5adcebc8f31c31ddbad021eca195bc37fcc63e71012f50e7880fabe30544c0a9e43b66c6cdaf1e45a2ab8339df156b15afde4a249539f95cf016e464a0aee2038ab7aabe5673857ba3d9180adcde85000000"], 0x58}}, 0x0) write(r2, &(0x7f0000000380)="d45339abca5838efc4d3cc98705c54167371efc0da3a50ca82b25f7f42bbe6f6afab0430e8da795321fb3e9bcce40676db1928963c5933f84ae82cd4f5118377dde74e284746770a95281fe25520a16f0801e9bf09c4208e68e887a51c558ae27a4dd11fa6cfed0b226552e2b773747ebeb510e4638dec30f20f4b80dcde301bf9f92dfc0ed4cfdebeaf00ed44ccaafc5d6b7e2f6661e9b1a56a545c8653411b4e868dfdcb584a090321c3780ad88125f653bfe35394c5fe061efffedfd931334e05ce810d18014de4548f931333ed08fdf8120e6aaef42ac527ced13663059e62", 0xe1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRESOCT, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:40 executing program 5: r0 = socket$kcm(0x11, 0x1, 0x300) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x408802) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/enforce\x00', 0x4482, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000200)=0x80, 0x4) capget(&(0x7f0000000000)={0x0, r0}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{0x7, 0x1, 0x80000001, 0x4, 'syz1\x00', 0xfffffffb}, 0x4, 0x10000000, 0xfffffffa, r0, 0x4, 0x9, 'syz1\x00', &(0x7f0000000040)=['proc\x00', 'proc\x00', 'vmnet0vboxnet0selinux', '-\x00'], 0x21, [], [0x3, 0xc6, 0x5, 0x276b]}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000240)=0x1) ioprio_set$pid(0x2, r2, 0x200000000007925) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x80000, 0x0) 07:13:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 366.378642] IPv6: Can't replace route, no match found 07:13:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x100f0, 0x0) 07:13:41 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) 07:13:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200603, 0x0) getdents(r2, &(0x7f0000000240)=""/36, 0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28010000000000000001f27b6bd3bd7c39fe2557f6bc7bf40aa4622a024345bcbe13e12c227adb69cb07068126e20b49ddb704e60ca9afecbfacea6267a8c9773c487b8bd17e78eaeb5c44c6eb1499c5d0690a5c796ac083f9cd560adfeb56504a27897372d9279680ec8a7fa6a80694809846d265cf365a06091748febacb5fbf2809a0720d936684cc649c272adc0ea7e3fbaf38cfb14008000000000000008c128d391887236dc10ef6ef7720b56a9bbf64f4cf85565297601ef17eb738ec31913dcc501ff1af0489ea89529e36df1e4ec00db5b4acaea29263e866b34b4affffffffffffffff89cad8ce222acf", @ANYRES16=r0, @ANYBLOB="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"], 0x3}}, 0x48080) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x3, {0xffff, 0x100, 0xb337, 0xd0e, 0x8, 0x50}}) r3 = accept4(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000100)=0x80, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x800, 0x6, 0x5, 0x3f, 0x45, 0x2, 0x4}, 0xc) [ 366.430613] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:41 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/slabinfo\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = socket(0xa, 0x9, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x3, 'geneve1\x00', {0x40}, 0x20}) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4) [ 366.497433] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 366.555140] IPv6: Can't replace route, no match found 07:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff0000ad9386e150acb4faa100000310dfd126b042c52729aa000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a5f30f095a0019e02626205bf30f098503f800443c0f20c0c00f0000000f22c0b949090000f3e1000fae44ee08", 0x38}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000240)=""/185) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) uselib(&(0x7f0000000040)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:13:41 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2(&(0x7f0000000040), 0x80000) r0 = socket(0xa, 0x3, 0x8) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) r3 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xfffffffffffffffa, 0x80000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x800, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000280)={0x3, 'lo\x00', {0x4a}, 0xb203}) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000000c0)=0x1, 0x4) 07:13:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x100fc, 0x0) 07:13:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 366.736242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:41 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x761541) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) [ 366.824675] IPv6: Can't replace route, no match found 07:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) 07:13:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:41 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) read$alg(r1, &(0x7f0000000100)=""/70, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r2 = socket(0xa, 0x3, 0x8) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) r6 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xa) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xd) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r12, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r12, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r11, @ANYRES32]]], 0x7, 0x1) r13 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r13, 0xc0385650, &(0x7f00000001c0)={{0x2, @addr=0x200}, 0x8, 0x3, 0x174}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x23, 0xfffffffffffffe16) 07:13:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10158, 0x0) 07:13:41 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x8) socket$kcm(0x11, 0xa, 0x300) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r5 = open(0x0, 0x0, 0x0) fsetxattr(r5, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) openat$cgroup_ro(r5, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0, 0x38}, 0x0) [ 367.062582] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 367.134693] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.166240] IPv6: Can't replace route, no match found 07:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x27, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x5c5c40, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file0/../file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 07:13:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10174, 0x0) 07:13:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0xbf000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) setpgid(r4, r5) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000045) r6 = socket(0x10, 0x80002, 0x0) r7 = semget$private(0x0, 0x7, 0x0) semop(r7, &(0x7f0000000240)=[{0x1, 0x6}, {0x1}], 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r8) r9 = socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(r8, 0x0, r9) semtimedop(r7, &(0x7f0000000100)=[{0x0, 0xfff9}], 0x1, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) semctl$SETVAL(r7, 0x2, 0x10, &(0x7f0000000640)=0xe22) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}]}, 0x98}, 0x1, 0x0, 0x0, 0x4c081}, 0x40050) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:42 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x1c3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x4000, 0xf9, &(0x7f0000000040)=""/249}]}) 07:13:42 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32=r6, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="e6eac27e88e6fad7a2671927d1036ed95335aa172f4d4a04a30c3b811576e9a325b073dfeca3b0f67d2248013de9c10aaf3f20e7", @ANYBLOB="4535e9e7e8691ff5700605a4274029a744fbe6be5476957b5438ea4ee65bd659d12c86fe52f342f037ac669642911235eeaaa34cb98de2d119582beea3e3250529b789951a7ed10bb0aea926c622e4f262560526a8108d9f2f2f9181f62b4a9d2ae8096ad91a6aefe697fb64bc4550ab1791ebc67de128b428ace2d913e8e663"], 0x7, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000080)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x10) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) r11 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$netrom_NETROM_N2(r11, 0x103, 0x3, &(0x7f0000000000)=0x50, 0x4) [ 367.794882] IPv6: Can't replace route, no match found 07:13:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:42 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) 07:13:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10300, 0x0) 07:13:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 368.030863] IPv6: Can't replace route, no match found 07:13:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x527}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x30df344a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x45) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000380)) 07:13:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) socket$pptp(0x18, 0x1, 0x2) 07:13:42 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r2, 0x0, 0x0, 0x80800) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x410740, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="00496b8281fc2a448a92b84938309912f8cc3c27442159935b99c34d3e009161723114b777d5e6b06bbd6bfdc985763ddca96d1251aaf9c7c4b5b67d149557b0c32ba4e5fe7ae3a7a55dd1bd2a40001ea167cc940000000000000005dcf7bff3687ef83a06f36e2e3f870cc1597f551fa676f8ec2d4fdd7c5a0e922973ff17ffb0e40deb3c6a550b7459c3f0bf10f9f6000000000000000000203bf0968e54a68ec22131ed49aa516c26fa611b180ea9feacee305688000000", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="a59d69992b1e11c17fd4053202b083c07ca70dfd16d1c5b3ae46832da742fa5dda772bcdea48d8fad027673d23fba96644195238ac164324ae646ccd2ecc892b55b5ebf40749001918739fbc5f710ef62c00ea45ddcf1a8f435f56dd8e6e06828e7551e6259588b8f61afc712c7e71eaf38c94df80f63de62d905d988ea67bc3e9ac556c2a2176f0c5dc6e432b34c007af05ff97f8c3c4c43079398afd0070c8e188808252848a69b3ab266287e8c5ff3bc83e41badfd827dbdc60e08c31ed2a8a936b4d657c4b68187763c4ad0f14ba5cc4a122f63f3c9ff1f038f281621b546cf2", @ANYPTR64, @ANYBLOB="f089a6b46db42e8bf8bea3905860ff84a0cbd85c0ba55bd172382ac0b39a2cfd8804d7580e75b4e5884e13645e4b24db7c7f620619d93b1f65e26bc085156e68e200bcadbab94a660ec41466130734c6bf", @ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESOCT, @ANYRES64=r7, @ANYBLOB="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"], @ANYRES32=0x0, @ANYRES64=r0], @ANYRESHEX, @ANYBLOB="a8e0f7563717d6574405ef3d6ada745be18793196ec93f29f9534deb3b1c8be5ce47c748765e5d54a5b3c182c06f55591931d9bc248e93aa956dd8e9e15ffb07279fad4755a84b0f069ab6ef5f8b3ec44b00816e7c6af8ce4209a9388ffda7fbc756766925d6d3fd249cfb07af10975ccdcdb5dca18c25ee9242d435187a2d6935f6a59dc2762e2f7413f6dc0f0f256710668e89d7b157c8442e4a06035f0a972969ea59798764d5fefba2f639fd1ed37b458041bbc2864b2331fdc88cf2fd7814edf1e52f82400bc37e270b1b3a1f5e84aa"], 0x7, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1) 07:13:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) 07:13:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 368.261326] IPv6: Can't replace route, no match found 07:13:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10600, 0x0) 07:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000080)={0x7f, 0x0, 0x300e, 0x2, 0x80000001, {0x0, 0x9}, 0x1}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x5b9, 0x7, 0x4, 0x40, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0x2b, 0x6, 0x2, 0x3, "74dac51e"}, 0x2, 0x4, @offset=0x294d, 0x5}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r9) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYPTR64, @ANYRES64=0x0, @ANYPTR, @ANYRES32=r0, @ANYRESDEC=r7], @ANYRESHEX=r3], @ANYRESDEC=r9, @ANYPTR64=&(0x7f0000000380)=ANY=[], @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="988166ab334549de5c4f7b8e65773c6ff5c7b4001f0e3064663071950ec075127d51d1d6", @ANYRESHEX, @ANYRESHEX=r0], @ANYRESOCT], 0x6}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002c00ef06000000000000000000000000cfd54547a98c1b29403c854b903b2e8f923c1ad6c2b471c50427b015aac34eb2ed66c8ab61c20024d4425e4fcc7b6a360e3b7d449e8c98c2e9da5c5286bc70c151", @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) 07:13:43 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x103000, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x9}}, 0x18) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 368.533850] IPv6: Can't replace route, no match found [ 368.540644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000002400cb054c3761b43d7282eac494b1e462abb0cc53ac0ed399d91b2bd53f6ba2003dd7da6bde5af3a89851ae00000000000000742484b7ccadc0582bb66fb611925c3a24d0ddb6403c14eaae4e74a640882db9ceb6b8e3c953372dc67de0def1c3230e3699418067504de23aa53d1d3c378d3583d6aae1422fc0e74e7481ac9889a8581126549ada28f7955d440eb164da8befca83d5f1d399", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f00000000009319ba64c87427d5ccf7898a5c9a8aff6d5dd7f1adf8b983e888f8ffb7b2603e40d7a9b82a002343271600c8e4dc236625af737c4b88a69f9e228ca862d7eadc9784"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x4, 0x3f) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10700, 0x0) [ 368.610117] audit: type=1804 audit(1579763623.196:115): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir088444942/syzkaller.cmbTZZ/6/file0/file0" dev="loop3" ino=137 res=1 07:13:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x527}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x30df344a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x45) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000380)) 07:13:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:43 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x14, &(0x7f0000000640)={r8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r8, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r8, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r9, 0x7}, 0x8) [ 368.733206] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.756395] IPv6: Can't replace route, no match found [ 368.782472] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:43 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x0) 07:13:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x1, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024eb2f49b97fc7000705000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100000000000000000000000000000000000000004f00"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df0098280200e20043ec50e56208ad9ec47240e3fd8730d4b5998222316d3a7582cc7cdaec93c4e1882d9785de6b07e83696ff59d032a9bf"], 0x38}}, 0x0) socket(0x10, 0x80002, 0x0) 07:13:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10900, 0x0) [ 369.062486] IPv6: Can't replace route, no match found 07:13:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:43 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400840, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) fchmod(0xffffffffffffffff, 0x1c3) 07:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) connect$nfc_llcp(r4, &(0x7f00000003c0)={0x27, 0x1, 0x2, 0x5, 0xfa, 0x1, "227be1ae26ca46cb8da69cdec571eb2fb7b905f0c1fbece4a89826535631f47da97ecfb76e41d0297e73cebf6177c5f92233a559059587362bfdcd75810ee3", 0x35}, 0x60) 07:13:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10a00, 0x0) 07:13:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 369.313712] IPv6: Can't replace route, no match found 07:13:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000840)={0x0, 0x82, 0x7fff, 0x7fffffff, 0x3, 0xfffff000}, &(0x7f0000000880)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x81}, &(0x7f0000000300)=0x8) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x200, 0x4, 0xc, 0x4, 0x1, 0xfd}, 0x9c) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000fe800000000000000000000000000008fe80000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006a0800000000000000000000000000000033000000ac1414bb00000000d48ed23b0000000000000000000000d9380000000000000000000000000000000000000000000000ffffffff"], 0x4}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x68, 0x2, {{'cbc(aes)\x00'}, 0x100, "7ad475a2476b8039671e2a3d0c4cc66b867020322fba98fc2823473a53b7f9b2"}}]}, 0x158}}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0/file0\x00', 0xfffffffffffffdd9, 0x1) 07:13:43 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x200800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000006c0)={0x12, 0x0, 0x16, 0x14, 0x3, 0x2, 0x2, 0x55, 0x1}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) socket$netlink(0x10, 0x3, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000640)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80201000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x40}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xc24}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x15c, 0x63, &(0x7f00000000c0)="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"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000700)={0x7, {{0xa, 0x4e22, 0x4e0, @rand_addr="c9a4a2ea0ef003f894650fd92afdae12"}}}, 0x88) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 07:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c00028015009a280200e200e36b58d75f42067dea3d85a18078bbabf593c0726f2778c9fd3437a51e7900756d67df2176ac6505e407c932f736ba2721f0b0564bfc8afee6"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 369.479062] devpts: called with bogus options 07:13:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x129841) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000001080)={0x10000, &(0x7f0000000080)="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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0}) 07:13:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10b00, 0x0) 07:13:44 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x38, 0x0, "c628f0d5690b29cb96a06a00314b65ba2593f551fdc462d9597d060fd6d96a207a11ca676d63625252ac929b0f24d2b95ab75e4e93cd99d582aaf3a427fa231f07cfad08bd9fb5282a6c09af8cae9a45"}, 0xd8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 07:13:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x1000, 0x4000, 0x0, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xe2) close(r3) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c00ffff9d4300000000000000000000000000000000000000004f00"/64], 0x58}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000002c00ef0600"/20, @ANYRESHEX=r6, @ANYRESHEX], 0x3}}, 0x4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1c1000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0xab) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 07:13:44 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x0, 0x401}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x400007, 0x4) [ 370.028942] IPv6: Can't replace route, no match found 07:13:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10c00, 0x0) 07:13:44 executing program 5: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getpgrp(0x0) capget(&(0x7f0000000000), 0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001006b8000000000020001cfbb6c9a20ed4fccef462d8a81e6d2a5e4a0e4c4a6c3784e199b82e7e6cc782282dce8069d792600cbf6c25cd13276e8506295e7486888770a8d0600e3d4000240f25b835f4f878f7e34c345ff3f7b45ad32c5044651b5f6cea3fea54f9da010908dce5b8f12e0fd74ddd0a8b40056f144e6575cd984aa4857576560741d9343e6d985e2094babf1", @ANYRES32, @ANYRES32=r4, @ANYBLOB="e6ce2570d3c5dd0e", @ANYBLOB='B', @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r5], 0x8, 0x1) socket(0xa, 0x3, 0x8) syz_open_dev$amidi(0x0, 0x9c4, 0x70000) gettid() sched_setscheduler(0x0, 0x5, 0x0) waitid(0x83b895581628fca4, 0x0, 0x0, 0x80000000, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0), 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r7, r8, 0x0, 0x102000004) 07:13:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f00000003c0)=""/4096, &(0x7f0000000000)=0x1000) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r8, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 07:13:44 executing program 4: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x442000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x3}) [ 370.206383] IPv6: Can't replace route, no match found 07:13:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:44 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x7f, 0x1, 0xc0d, 0x1, 0x6, "c35a6dfe24024354f894f387a3faac552f5b1d"}) 07:13:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10e00, 0x0) 07:13:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 370.428129] IPv6: Can't replace route, no match found [ 370.446163] selinux_nlmsg_perm: 367 callbacks suppressed [ 370.446180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.464924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.566340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.613392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.628096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.678160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.691313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.704166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.717704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.730257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15213 comm=syz-executor.0 [ 370.748021] IPv6: Can't replace route, no match found 07:13:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x4b, 0x7, 0x4, 0x4000000, 0x7, {}, {0x3, 0x1, 0xf2, 0x0, 0x8, 0x80, "a639bab7"}, 0x0, 0x3, @userptr=0x9, 0x800, 0x0, r2}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0xc40, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x401, 0x2, 0xff, 0x6}, {0x8, 0x0, 0x1, 0x2}, {0x2b, 0x8, 0x5, 0x3}, {0x3e, 0x4, 0xff, 0x1}, {0xefb9, 0x20, 0xd6, 0xaa2}, {0x7fff, 0x8, 0xc1, 0x101}, {0x4, 0x8, 0xd8, 0x8}, {0xed71, 0x5, 0x3, 0x6}, {0x2000, 0x6, 0x3f, 0x5e5}]}) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000b80)="9aa2ed8d0e8c0392ec22893ae3797cd7df1e4a321819741185ab126584ad16a04ae4f2b442dc962521efba25bbf710f066b5a6eace18ed82449ca247c999eb8f72807c7a91f70bd762b63267faf4565c832956937fef05457758ac728959a90c6583efbb8eba7b6a11d44b37de673c9850c7d9a73c3c8f1c50921345e3") r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) sendto$packet(r3, &(0x7f0000000080)="2fabdc", 0x3, 0x10, &(0x7f00000000c0)={0x11, 0x5, r6}, 0x14) accept$phonet_pipe(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 07:13:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x181840, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000040)={0x0, 0x2}) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:45 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000000)=""/47, &(0x7f0000000040)=0x2f) 07:13:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10e28, 0x0) 07:13:45 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374fe6d2e246c2cb4bdaf575cd62273746564252670707031282700"], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r3, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0xffff8000}, 0x8) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "c38afbe42da54d31", "d547d16b8c052502513a4a1b90ec72a1", "6b772bbd", "c1d165af2049512b"}, 0x28) ioctl$TIOCSETD(r0, 0x5414, &(0x7f00000003c0)=0x15) 07:13:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 370.878724] IPv6: Can't replace route, no match found 07:13:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x5, 0xff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYPTR64, @ANYRES32, @ANYPTR, @ANYRESDEC=r5, @ANYPTR64], @ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r7], @ANYRES32=r3, @ANYRESOCT], 0x3}}, 0x800) r8 = socket(0x10, 0x80002, 0x0) r9 = dup(0xffffffffffffffff) setsockopt$packet_int(r9, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r9, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'gre0\x00', 0x3}, 0x18) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 07:13:45 executing program 5: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) gettid() write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x1f}}, 0x18) syz_open_dev$amidi(0x0, 0xfffffffffffffe01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) pipe(&(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) dup2(r3, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x4f, &(0x7f00000035c0)=[{0x0, 0x7d}], 0x1}}], 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext, 0x4400, 0x4000000000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x8) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 07:13:45 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800490600004303165fb86786c52f1ed63383f386b8a3da4dbf7248e800"/49], 0x0, 0x1a}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 07:13:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:45 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f00000000c0)) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10f00, 0x0) 07:13:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040), 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x8) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') getdents(r1, &(0x7f00000003c0)=""/230, 0xe6) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 371.185381] IPv6: Can't replace route, no match found 07:13:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:45 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11100, 0x0) 07:13:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@null) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x16, 0x4) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4844}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) getsockopt$sock_timeval(r3, 0x1, 0x1, &(0x7f0000000080), &(0x7f00000003c0)=0x10) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) [ 371.427643] IPv6: Can't replace route, no match found 07:13:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/18) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:46 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11200, 0x0) 07:13:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 371.742893] IPv6: Can't replace route, no match found 07:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x0, 0x49, 0x8e, 0x7, 0x56, 0x400}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/142, 0x94}], 0x100002bc, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1200}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x8) open(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81c00) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r9 = socket(0x29, 0x80002, 0x0) sendfile(r9, r8, 0x0, 0x6000000000000) 07:13:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:46 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11300, 0x0) 07:13:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r8) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r7, @ANYRESOCT=r8, @ANYBLOB="c8ce7e981e50d3fd240f4e0fd53baf85dce5ef4319e0a061635cfa9b6529532cbaa97fe312841e8d6df126b5705d7b70b77caf322cc2ef6da0424cf93e88230c61cdcefd7a24b21751dc222c20e920c8", @ANYRES64=r1], @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ioctl$RTC_UIE_ON(r3, 0x7003) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x30}, 0x38, r9}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x9, 0x1}, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 371.984140] IPv6: Can't replace route, no match found 07:13:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef06000000000200000000000000", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:46 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11400, 0x0) 07:13:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 372.299736] IPv6: Can't replace route, no match found 07:13:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/142, 0x94}], 0x100002bc, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1200}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x8) open(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81c00) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r9 = socket(0x29, 0x80002, 0x0) sendfile(r9, r8, 0x0, 0x6000000000000) 07:13:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x8001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000080)=0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r6, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 07:13:47 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:47 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$FICLONE(r1, 0x40049409, r2) 07:13:47 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11500, 0x0) 07:13:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 372.864764] IPv6: Can't replace route, no match found 07:13:47 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:47 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x1f, 0x4) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0xfe, [[0x3, 0x93e, 0x7ff, 0x7, 0x100, 0x7f, 0x800, 0xffff2346], [0xd56b, 0x3, 0xffffffff, 0x7fffffff, 0x7fff, 0x100, 0x401, 0x8], [0x8, 0x2, 0x1ff, 0x6b, 0x3, 0x1, 0x7, 0x80000001]], [], [{0x200, 0x1000, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x80000001, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x1}, {0xa2c, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x20, 0xfce4, 0x0, 0x0, 0x1, 0x1}, {0xfffffff9, 0x1, 0x1, 0x1, 0x1}, {0xee, 0x4}, {0x1f, 0xd15a, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x80, 0x1}, {0x6, 0xd8}, {0x7, 0x2, 0x0, 0x1, 0x1}], [], 0x8}) 07:13:47 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11600, 0x0) 07:13:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffff, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 373.161165] IPv6: Can't replace route, no match found 07:13:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/142, 0x94}], 0x100002bc, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1200}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x8) open(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81c00) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r9 = socket(0x29, 0x80002, 0x0) sendfile(r9, r8, 0x0, 0x6000000000000) 07:13:47 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/251, 0xfb}], 0x5, &(0x7f0000001440)=""/59, 0x3b}, 0x2e}, {{&(0x7f0000001480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/149, 0x95}], 0x1, &(0x7f0000001600)=""/250, 0xfa}, 0x3}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001700)=""/26, 0x1a}, {&(0x7f0000001740)=""/111, 0x6f}, {&(0x7f00000017c0)=""/166, 0xa6}, {&(0x7f0000001880)=""/224, 0xe0}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000001a40)=""/39, 0x27}], 0x6, &(0x7f0000001b00)=""/4096, 0x1000}, 0x241}, {{&(0x7f0000002b00)=@in6, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/175, 0xaf}], 0x1}, 0x7}, {{&(0x7f0000002c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d00)=""/122, 0x7a}, {&(0x7f0000002d80)=""/22, 0x16}, {&(0x7f0000002dc0)=""/60, 0x3c}, {&(0x7f0000002e00)=""/203, 0xcb}], 0x4, &(0x7f0000002f40)=""/67, 0x43}, 0x7}, {{&(0x7f0000002fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/149, 0x95}, {&(0x7f0000004100)=""/144, 0x90}, {&(0x7f00000041c0)=""/38, 0x26}, {&(0x7f0000004200)=""/112, 0x70}], 0x5, &(0x7f0000004300)=""/113, 0x71}, 0x9}, {{&(0x7f0000004380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004400)=""/63, 0x3f}, {&(0x7f0000004440)=""/83, 0x53}, {&(0x7f00000044c0)=""/226, 0xe2}, {&(0x7f00000045c0)=""/57, 0x39}, {&(0x7f0000004600)=""/155, 0x9b}], 0x5}, 0x49a8}, {{&(0x7f0000004740)=@ax25={{0x3, @netrom}, [@bcast, @rose, @remote, @null, @rose, @bcast, @null]}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000047c0)=""/153, 0x99}, {&(0x7f0000004880)=""/235, 0xeb}, {&(0x7f0000004980)=""/80, 0x50}, {&(0x7f0000004a00)}, {&(0x7f0000004a40)=""/154, 0x9a}], 0x5, &(0x7f0000004b80)=""/138, 0x8a}, 0x400}, {{&(0x7f0000004c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004cc0)=""/101, 0x65}, {&(0x7f0000004d40)=""/27, 0x1b}, {&(0x7f0000004d80)=""/209, 0xd1}], 0x3, &(0x7f0000004ec0)=""/129, 0x81}, 0x7f}], 0x9, 0x12103, &(0x7f00000051c0)={0x77359400}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000005200)={{0x2, 0x4e22, @remote}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e21, @remote}, 'dummy0\x00'}) 07:13:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11800, 0x0) 07:13:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') renameat2(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000001080)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) connect$pppoe(r3, &(0x7f00000003c0)={0x18, 0x0, {0x2, @dev={[], 0x24}, 'netpci0\x00'}}, 0x1e) r4 = socket(0x10, 0x803, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000000000000000000000000000000512921df34b99434000000"], 0x58}}, 0x0) r6 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x13) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) r11 = open(0x0, 0x0, 0x0) fsetxattr(r11, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000840)={0x1bacf914c1bac82, &(0x7f0000000400)=[{@fixed}, {}, {@none}, {@none}, {}, {@none}, {}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) [ 373.460629] IPv6: Can't replace route, no match found 07:13:48 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x10001) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@default) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11900, 0x0) [ 373.698193] IPv6: Can't replace route, no match found 07:13:48 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x9, 0x7fffffff, 0x120, 0x401}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 07:13:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRESHEX=0x0, @ANYRESDEC], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0x6}, 0xa) 07:13:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3, 0x0, 0x0, 0x0, 0x100}}) 07:13:48 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11a00, 0x0) 07:13:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:48 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4080, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x290d312e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) fcntl$setstatus(r2, 0x4, 0x0) 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 374.399235] IPv6: Can't replace route, no match found 07:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r5) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], @ANYRES32=r4], @ANYRES64, @ANYRESDEC=r5], 0x3}}, 0x20040040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:49 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0xa, 0x3, 0x8) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x9, 0x4) 07:13:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11c00, 0x0) 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x5, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 374.640522] IPv6: Can't replace route, no match found 07:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x7ff) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x6, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11d00, 0x0) 07:13:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x7, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', 'net/fib_trie\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 374.950829] IPv6: Can't replace route, no match found 07:13:49 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r7) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$VIDIOC_SUBDEV_G_SELECTION(r8, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x4, {0xffff36c4, 0x7, 0x4, 0xffffff58}}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010300f1ff0c3600f06c766172c2ea261f6735657c630fa11b4cfbe385de18acc1ddba7b27589437ff754b111d543539e7c36335551ec21ef10b76f0e6c93600d4774b0c81ae258b8956ec11e26200000000000000000053e32d29e2d9bbcb6800000000000000", @ANYRES32=r0, @ANYRES16=0x0, @ANYRES64=r7, @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x0, 0x64, r0, 0x0, &(0x7f0000000040)={0x990a6d, 0xfff, [], @p_u8=&(0x7f0000000000)=0x3}}) write$FUSE_INTERRUPT(r9, &(0x7f0000000100)={0x10, 0x0, 0x4}, 0x10) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:13:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 07:13:49 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x11e00, 0x0) 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xa, 0x0, 0x0, 0x0, 0x100}}) 07:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 07:13:49 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 375.326856] IPv6: Can't replace route, no match found 07:13:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xb, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12000, 0x0) 07:13:50 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x100, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000ec0)='/dev/snd/seq\x00', 0x0, 0x420040) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000f00)='trusted.overlay.opaque\x00', &(0x7f0000000f40)='y\x00', 0x2, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000200)) syz_open_dev$swradio(&(0x7f0000000e80)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f00000000c0)=""/208, 0xd0}}, 0x10) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000e40)={0x69, 0x20, &(0x7f0000000a40)="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"}) 07:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xd4c, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x3f, @mcast1, 0x19b}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x37}, 0x4}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e21, 0x2, @remote, 0x5}}, 0xd1c, 0x800, 0x0, 0x80000001, 0x6}, &(0x7f0000000480)=0x98) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000700)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="aab36f789bfa49e3837d174f690e2422dd03eaf4683213b4c81d46646d37560df5ec5b8709e6fed3f797d5737b1f25a00c6dc3a7c4909778084256bc91fb641db0f3a6776265bb8db6cf8bec118bfd", 0x4f}, {&(0x7f00000007c0)="4136615cf93e9f8b69ad37d96c98e400561829ee7f3023da1ae4db5e21379ae773ea412430fedcce126bc4ec965f9d4ff76b27cc1f1087499d4bb201c95a88fd66fc472f49854e33f9dfaa8100e6f01fcb59f0e65f72b3404edecfeee77c2fd6d496834ddd175ccbb60fe79274f8b6bfc5717e24ddd1cafe3ce00184b2fa7c48560bd1c51791679fad8e96f6929d78c74983469a2cbd207a3dc96e963ca62684a189072a7675c69d221f01904f906dac6f5f0e7a5249cb654cded9274862d7210cee9f0630e58199c3d3a66cd05e6651e8b2123979ccb132412421d200"/234, 0x38}], 0x0, 0x0, 0x0, 0x24000004}], 0x1, 0x8008800) 07:13:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0x0, 0x0, 0x0, 0x100}}) [ 375.639741] IPv6: Can't replace route, no match found 07:13:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$RTC_WIE_ON(r1, 0x700f) [ 375.688065] selinux_nlmsg_perm: 230 callbacks suppressed [ 375.688083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 375.713151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 375.771943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 07:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000340)='net/unix\x00') ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000004c0)={0x1, "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"}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r6, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 07:13:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xd, 0x0, 0x0, 0x0, 0x100}}) [ 375.846527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 375.872925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 07:13:50 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="b8", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = dup(0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r6, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x9a2, 0x4) 07:13:50 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12100, 0x0) [ 375.873115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 375.873294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 07:13:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12200, 0x0) [ 375.873564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 375.873878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 07:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) sendmsg$rds(r4, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/92, 0x5c}], 0x5, 0x0, 0x0, 0x44}, 0xd5) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380080002c00ef12000000000000000000000000e1f9cc0e98c51f457f3ae4fa95f39d930c00fae0ea5ca12fb0e65836b4eb968b535f08c7d292fa235fd2cc9f17f8e491694b215b3670f07cc40f33205f5218ae5a392db63aacf3d9be6ca6fa38fb4c22322c8c4795651b8723d8e6ec0d7f6ceb8627f976837b32f36476ba47d90d9fe6fbae33628662ace603233508162d41198d80c781a98ce46619c35934fb989e3af56271d662903f521fa5d9de54cc6fc2eadfe8fa163858a7f6d38318984d871839faa71eaeb69e372b303b99dd5f0ed5aec18ca6b6930140978dd624ac0d25999e8d07ee3f9d925c68b021a0bf9a3bb02e75b676d4e11404fb7297202cc643c07b18d242d3f4cb8d1fd44c80318f11538584147612d1059b473ef959e22889dd671573571a784318df2baf6994c6c647c7ef6f7a1e31bc026b9e4329bcedbe", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 375.874143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15585 comm=syz-executor.0 [ 376.054486] IPv6: Can't replace route, no match found [ 376.142967] IPv6: Can't replace route, no match found 07:13:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xe, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12400, 0x0) 07:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002cb90c300280001000000000000000000000000000000000000000000000000000000000000004f000000000033d7a843362f49c88e6c06eca6d5e657d1ed5206d427b785441c6ff9c6b83d70067fa68f7d9e55e33cc6c00190c7311806950af4b44b5ab4064f20f5585c7c1b184e76117061701c2489189cf4aa9ec1c0ec0928539ea6c1b14cd109cee51efcb386603072432c9875aa8bc636be3b34669bc17f3195737c215e06c70202764fb309e545c785108b3375d167bffa1748e9fa5529"], 0x3}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYRESHEX=0x0], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x100}}) 07:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 376.481481] IPv6: Can't replace route, no match found 07:13:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x11, 0x0, 0x0, 0x0, 0x100}}) 07:13:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 07:13:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000024000704e60000000000000000000000b64f5e6a9ce6154cd4f8a3a915b6f4eb05f8445165e393aace5dac517d1c76b573168a86befe8cafd80b51031adda5458dfcbe9ae005c828c7ce570eea314bf6bf164dfec6beedd44e28a43518ed63a6490cb957f3a07ba384f743a02a6f3d68550e705832f6ee3827c63412a4c06ea3fbf79f4fdea302bb2340999a", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12500, 0x0) 07:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 376.687212] IPv6: Can't replace route, no match found 07:13:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:13:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 376.723775] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.785663] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:13:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12600, 0x0) 07:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2000, 0x0, 0x0, 0x100}}) 07:13:51 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) [ 376.984530] IPv6: Can't replace route, no match found 07:13:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x420e, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000003c0)={0x690, 0x360, 0x400, 0x280, 0x5, 0x5, 0x4, 0x2, {0xe1, 0xee}, {0x5, 0x3}, {0xffffffff, 0x5}, {0x9, 0x7, 0x1}, 0x2, 0x0, 0x81, 0x6, 0x1, 0x5, 0x8001, 0xfffffffc, 0x20, 0x7fff, 0x0, 0x5, 0x0, 0x0, 0x3}) r4 = dup(0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x10, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x84880}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="790200002c00ef0600101a001a00000000000000", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0x8b5}) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) r8 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfef0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) write(r10, &(0x7f0000000040)="e0", 0xfffffe00) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xd) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r12, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0103b6c79ca3be9ccb5a0598bbe931000000000000f06c766172c2ea261f6735657cc508", @ANYRES32, @ANYRESOCT=r8, @ANYBLOB="82f19ab860e3aa6a71576b001a332a7d1ffe65bd5a04371afc8fcdc7f874a39362beeecb34f6900e293db78eca8e9b1a0b9744c9b02e21c258a56ab1233e", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r12, @ANYRES32=r10], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r11, @ANYRES32]]], 0x7, 0x1) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000580)={0xa, {0x9cd, 0x4, 0x8, 0x7ff}, {0x9, 0x800, 0x80000000, 0x1}, {0x4}}) 07:13:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7f00, 0x0, 0x0, 0x100}}) 07:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:13:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12800, 0x0) 07:13:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xff01, 0x0, 0x0, 0x100}}) 07:13:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0xf}) [ 377.270863] IPv6: Can't replace route, no match found 07:13:51 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1280e, 0x0) 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000003c0)=""/78) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000000000)="fc399ccf0a1a1742a62fdf624e552a3a6069009e9d136b6aca5b8affb3a9bb790572c903ae7f3dc7f39218a3c99771a6f9a8d1661bd475f3d98f2ca20481c5ba6ed548f831", 0x45) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r5, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0xf}) [ 377.534727] IPv6: Can't replace route, no match found 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0xf}) 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x2000, 0x0, 0x100}}) 07:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000000000000000000000000000000000007f24ad63c0e45c2fd9da8af1b27d7bee4a0197092ab53f886a35363b4b722cd871bebba1b30607ade0aeab635eb4ffb0ea6863ad0e2ef22bb91a58bb46ba08a4bcd418ee8b5adbb141e78ccd55a5dd3d1cffc5e5bfdce79dc611c699d61a6d3963230e7654073e81d6788011e43ca4a45b95f4fdbd95bc15e05cd36f7bfc65a67e416f24c1de29d3efe92ec56627b7f38e67ba", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x400001, 0x0) mq_getsetattr(r5, &(0x7f0000000580)={0x4, 0x5, 0x100000001, 0x7ff}, &(0x7f00000005c0)) r6 = dup(0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r6, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') ioctl$TCSETS(r5, 0x5402, &(0x7f0000000600)={0xb9, 0x6, 0xfff, 0x6, 0x15, "3fff3cbe72ae59683a75fd48640c65bbe49583"}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01"], 0x3}}, 0x0) r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0xf, r8, 0xfffffffffffffffb) request_key(&(0x7f0000000640)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)='l2tp\x00', r8) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x48, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x29af}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10051}, 0x0) 07:13:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12900, 0x0) 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0xf}) 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x7f00, 0x0, 0x100}}) [ 377.863224] IPv6: Can't replace route, no match found 07:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800243b24fef0391efc880f783d4e270000240007050000000002000000000000006b3054ccd17fba6a8adfe9a072678b2360eee4b6533edef86c1d8f2f95b69c8c676056ff2a0949155c017cba72f9a82f4b11be9c41d1d4958499f49aefa7e55dd10d6afabdefd29f21c175b2b97dd6e622fdd3f5de2ee3ab520547fe3b106123e19f23c5632c418de351db934512b0a9e462ec69bad97fc9f5469f8b5c620dc7ba7ff3c3f0f9241f86fa162495ea1f77b41faa974e1c2bf6ad7bbd5b66feb7f9c0fdb8f0eb8444ad13f4801fe4cc4742a5a479338586dbb96ad32923a0b74e93bfcd676506b72e", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12a00, 0x0) 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0xf}) 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0xff01, 0x0, 0x100}}) [ 378.074269] IPv6: Can't replace route, no match found 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4000818) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0xf}) 07:13:52 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12c00, 0x0) 07:13:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x2000, 0x100}}) 07:13:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 378.362369] IPv6: Can't replace route, no match found 07:13:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0xf}) 07:13:53 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12d00, 0x0) 07:13:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x7f00, 0x100}}) 07:13:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0xf}) 07:13:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xff01, 0x100}}) 07:13:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0xf}) 07:13:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3}}) 07:13:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0xf}) [ 379.408126] IPv6: Can't replace route, no match found 07:13:54 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x12e00, 0x0) 07:13:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 07:13:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0xf}) 07:13:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000004ac0)={0x2c, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x4, 'dh\x00', 0x31, 0x100, 0x18}, 0x2c) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r8, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000004a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="170c923bae68afad2f0579029058bca201b060a482156caa7bc7071a73df93636414123082d5cfe5697bf2a0825b76083dd3a25bd1346b84cc572f3f8491a7161ac7e1d9af35cba2f3ad598af0bc81462ba1b76eb7baa782f4a37de7b7ffd7b659104f2a6a4db387cf57f0f941ba660a0093010324c6516903efa22c58db17cca094bb3a4ad507e8c9347d74e4aed4c8e01303167a93dc2343b76f9c519edd12", 0xa0}, {&(0x7f00000003c0)="53bb45d034a4f8", 0x7}, {&(0x7f0000000400)="c14bc8530b57529135a90d3fdc7369224431c2a077885e0fd6c145510f16e659c21503ece6a4391a7a0f4665f789ee8a0e13348e66e4e688fd061bd4d4bf4d413d51af332dc938acaa9f5bf857660710", 0x50}, {&(0x7f0000000480)="1537", 0x2}], 0x4, &(0x7f0000000500)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x7e, "94f673542bface97e582e1993cd5da03ef71743d49904ed92d6cecc4a2e1711e62688c7a48e98a2e64a54c6b7b3e23d3752ddf90a9f6c85be499ddce9ecf76c74b8683b5fa5f4bfb272904c2706aabe07db10678fd0c81ef345ea7273beeb6c9b9b226134b97fd5e224efa724722095b45221bccf4414e9823bc242d2fb7"}, @iv={0x20, 0x117, 0x2, 0x6, "77e357c81f1d"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x148, 0x8090}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000680)="30529dd83247cfb4fa491db74dee487d0541214920fafe7ad0", 0x19}, {&(0x7f00000006c0)="5606af78848b7ce7567e83fdef92bfb2c5b7839c7020cc413483e0723a768995affde2bf40aef4de55180cbba513e500c847a4ac4931e246e8a36994354b82e040aeb535625c7730e77f6b75c42e5e42324c12522aaeaf7b68b394b6be428bd8edf7f16bf248044166aa531a14d90270252b897de32afa1b562f66b1db47405625ced4e629358b41d12627ef099922a4db1303429ce456d3cebff2ad33dc48e376fde1d4e0029e432c", 0xa9}, {&(0x7f0000000780)="835b7fd064548d62d38b1a5d3cd03d1fd251979734fbf1adade1af75e2834a752f9dfe4b13c1b5d049cb0d016847284bb55f0f76a57ce2bf3f8ce9a6925644794e64d5d8dae90458710b6a6a79c60209ffcf500580826cbd61b316ea2a33fe15f464d204ed0d754bc922688f88bf85d6b83462f456be702eec316b959540da3303701f97d48c704ce185dfb77fcda06bca7bd42a51d75e8b060b47e533ce48a3aeb05ac9463837a3c0706facbf4e6452fec2357917060b609468005eaf957ccd6268e1e7d1455ef87c19c607569d9d05a9a749866c56ab137acc5b8f036c77094dad908f271a387b2a477198bf661d9a433593f03cc196e4dbd9b930d7be3166eb7d6c97bca369cd9983e410618ff2f88fcc4509ffc8fadacd4fc93e31b2fd1caf7b4760f21995cf7c4bb1253c2e0acd2b29fd4a463beab993b936b8e2e6f82fc4b36c9065d9db8ae77a7b9f6f4b096b8d9afbd237fd38fecbb92d73c6bee91ed6f3109f9da43e90ea916bf77d31abe16cbd83f03cd69f418115329f67a80b9832a70a87e61dbc42b188c32ed80b6977b8734619f900a5a09f7f5e12fe4e819ab4e73222199a5464cc285568e0324918988f5ab0cff5b0bb2e3c57c62a424b53e4bd74fb309aa27b8061aa35e29007b744ebfe91e4b4049ea770f71b1f635843188fa711ce1002f5455d1243326d00ad55cf8ed13ddc509ad7a17858182bdce2c9a178c53d4f13c1938b5522e46c74efa87755598fae0e5c169dc44abbb5aa07d2913c6a358946dd04c86b1f6e9763d864efd16d2ec7ffbe05078c824c641d13674dced95e4a7d879ee98c0478d4932c0b0d96e28e47aebc8d86bda729db608dc60d6a6026c55f0b89e6166a4303ddbb6f6d8b459b8f51ec7199064d7bc7a6da7f6b0897b2f1a6e80d8f179ae790f4c0f7421daf03c9dcfbcf9a2e56851c85b7dc8d4c2102fd5917ac09e9d7d90058806a05edb3a58557b618e3127f9bde473e7c6b9347bd444079de97cbe086b019048747b1cbb9a1c98eadebf63f75bcc40b276483d21d5400e624862776e8c0ce22beedb9f9e82d9b09008c4345127a10af5eaf99d4097580100a474e37a77c7ddaa4ff1b8fcc48afa82993ea05b76039d6588a5f269feda68a75dca41be758ba53af1b18a9c0e19cc0a960576e8ce5a1b186f57ef98766422a0676a04ce969ff6149fb3e0a9af52e5960571964c2a93b7fa978a55386f714473f71961f371cd3f0590b166928219f2c5b5324471c41208d37b7cd7d5e305ece3722be437b8595d2047db64fd29cab39a14347f980e0bfb87364d38388de53c4764a3a9ea28e871352d75f831e3afc24d0da7daf95c21f2e747aa48a57e416414783db8fb147c0b4fb005bcf1d5d86c28f1037338991484cab92ce98e876e47a177119cf4ade347c7e6e7d7cd2c2f59f65829925c56a5a830af10fd3933d91683156f423775c93a93eb86068c9ba30af4d620e797af2d0629719fa4b2a6ec32f09d4c8cc95bf177ec2561b43daa48c4dfb6df8c47e409bd3e3572de7b9c3d6e11ebca489dc8c92f68115c7bcd6d7011acc7ecfb877c54cc903c1c07b59aeb6c2e5b679fdd03699e4f7fed2340194532be503bc51d4e123a68196764cf36ffea4f5c67292df801a857c0924fc455eef64d6c4a50ba89998fc1fd257159a50244a232e48bfcd140ccbc50a4761ca379ae04a33f26479031c4e20bc3886487d46850ae744c1b3737e8e9cffc0401aa9d088db4ed056565822402004970dc1c4459351a6ab1ec47d52408ec941d161c572b31546c79eecd0961009cb907f792cd9a2a94f5972261deac589f7a5b558eaf3a94c43d59002bf9a0f14d1ff1eac0a340f471942942993f758a949e4b4edf3fd711a00133d885aca3fe245293898db8ab0d422e3e1844c635ac09d50161455ccd76e6101b704ec3bf0a61aead13156e80b621ab67635f59ff1c81e518cc30957e055cfbb315e0a0df16e56257122a81fc9078a1ea4aa8f35d2c19a3f362e8f2fa7044c35fe788131a07afb02ac638889f5da76118e74a8fae2f75dddf20ac8aa85a23d920a690994b5436b5dcd58df7ed952e15329804df3755a362661a7e7aaa1d82f2e6102d301b6466a7d1f70797807ab9a924cdbec2a26bed7546aaa6dfee6d7999f2bfe8436c5a4614dcab0b489e8fd50e56a2d74e3e8e8694eaeb97550aa7c27feef35454b5f402d82fd996f2c3b2c27d387d8c374951070a11d7b32cdc31f7e4dcc2671e0a2ea77e1cd2ad16e15e234cf5e1cbcd649ae5fc1fcfb8e7bf0326e48a84bdfd06d4bd070e453a5befd2d6284791397957aa80682b48b6106366d719330690657370ac26a7bfb873860b41e9b51f17688cf48899a0015aef61a36004e9ce44562182aef81f9f905704e63a9d6128b0a78b3b641b7d88464a35574aa2f8854c171fda4b8d837a1c18b8f3b1c3b624103ed8cb4159f5f62ac0a63dd0e33270aa4f3740cd08319d0a68c9f684bc10ee21c587dbf6b66c27e5fdd4ecc50a53be574e849f915eceebacfb721141f596d400b4ffccfebc317014b95d41cf0b45f6d49c203a520f0962c00fb5b91c1e8b163b4d4e85e006d9ca769f7088afd7e2adffa03949aa77e62e1c0c61f69ca9c114a78b26e6c2c4942929d85835ba9d3bc2eb2cde0143ede3b28d531253f8ce06ec636a45965f085c9cf474f0b4103f38639ada7aa4ba8252fbebf714d4fb005bdc4605e0080ef77576ff9f85360c85c24abbbb66a1571c233dba05fcb3d1ae1d3e947a022b57a05964ec6dcdeaf6560daffc7fb1ecda013e82f6c7006702a20657df3b23a1cf5459c40f8a2e05ef74d996c4ef45be3d987c107817612eefcb2ddb64076b50f4b07b1a8004d90ec9e4a398f14bdd379c117ca4b0755b8c5dddf1ae3df57e0a7d707f7b76454595fa72ac276d5c093672db91bf77f25e7b56f1935ac60bf1d3acb81987ed7a1d48ac023ea85646a1a52dc20de161f71a2a31c4959160921c26bef1129d0e0a79db809f69b95803e57d0b9f6faf71c8682d341130130119bb54a63ed98b1797fad4c3d7b16b41295e487e7ed1e38fc827c32148bcb49ad43b71aedc5a0618c8290cb9c7c2b2ea403497861bca229dd0eda88302679e1820564c9d66ebdc15790923985c32cb2b9b5ecf2255f583c0dc30a4133df73729441a4254f549e4a36a3dd77035b8a6cd52abcfc86714124795857fffa483e10f41e3de57dda9c70fe9cad123c9997231858a0a4904400b6194eb13ac2b0d54407c77315309a9c2fee5cca62f56633db55ddfb987f0ea8b942f390759a096bc5646174a8078c1bc801e303f6e99724d99fd4cbedbde5523f0a770a1f4cce0507dde22986b99e9e3ef36e3df349572fceff531bd758ddccf88702bcbd117637a6e57d0e4293d1f8468cf1a37388a0804bf31540d63bfa1998acd4116f34efdfca89faf4e5f48494882f040c79b13e6ac64d42dd5f9950a66028abec5b68aec7a4e1136f75c2a44f3fae616a845bec542cae621aa2a8119693f37ccf1e1af4896256121adc77ef2e9f8b18050e35ba1820193f8d4c4a7f135ebb83f28d7cc01febcad6abab73dee03a1dccb91f5c1ff4fac65f33afa7b1b53cd0c9d9c7f40f82dfc33a0d1ba92793c693f8fd179a9daf9d402694132819ca099ff5ccf5835be4278d8ff9f0de1c4ea15b235287c33476bababf444e2fc9949d3e14d1ffa8c64d645055e417f56f8e528c9b63a96a855e1ac5b05beb9e83eaa594ac331bd2633b0f25dffaf2df5095314de16163e7d4ed0c6678e43bfcafc8776b74a7128dbd4ce00a104f0c57d478f03a805ed1931f744334a34cd005d39ab4f9d2a829c30a5574e80faecc71c2208707c663f552034347e238e3296cbc9b6cc63135ab985c1c66c764ad7d8f41c20f13a1c80d9a30a99bf83b9902ca96272b21084b1a990104c663d15a7a12ebe19fe14c4f8f0aa8efc3ee144f0c681507bd48f755e945d50076002b290a1d65730dcd62025f8a21c23c94af2d337b0163a18a9e3a31f70d1044dee44ce467c66300ac7c6cd0500dc7b9514a8b80621f40c8f9b2234cd002446bd9f8a5c228cc399239eb270e9840e966bdf1f9755bf626a8a03ed6265a3fca66e139c58c853ab2d9025e0f2981063f90ec20787a008809d725dd56fb6d539a526edb20ebc81777ca5b6e6a90aab197ecb5d6fe0df1a913836845a0aba0992752255e2a056fa3118d2237c5f180f3d954c703e706aa3dbaa789c383756c89a928c4f07b77fa6403285d69a4bd4b19a70f7b083ae877a9d96fe42410fdfc79fa3296ec218e865f1e57302e81fd5904c751084130f3cab94b094acda7b73dd14dd1d65e8911b1b855b51fb27cb0d59901afd91aced11bb4f866899c811c541483194eaf8ca523aaa1efba90ac6fec102e29846b3197637a251f849f0ae9916ff8918ffdf6ff5e42595d95b2d27f6cc5fc0bca0ca74c73de090a5b13b31b1e1a1fada1ca0da39cefbcbaa09e5670c40adc0a8d764ceea5504351cece539284652dcc1fe61156964f2965fb7765192fe30e5512b22a50b45cb4b6de2d6e1356f716e7419aeef37d80fca01fccee0a30feb3ec038149c8895949a63a56529855bc02fe33c2f6c6573f6f0789ea276b495a9610a1a92c7726c2dc6e9c047b317b97fab220ca1492bcef9a14f043f6a31d71bd2fd6e2bc26622014182ad8574507ae78b061b60da1b5ea4053cfaec2f9bb81192f09ba87f5ce4c241be6545d140df1ffc91486975d12dec40b0752a91c4dfdb07b54e8b1573b4ad5c2f706aa4670f0d692fbdee54382451a066bd32e15928133e7a6df095e156600a155ea9b17556c3bfc37f316c5b2e7ebd66c5e723e3ce057b45dcefe88a4ff904758dad04d7ed44ebbeed95bb4b50950f0ce3a9fa4a04b1f7f16ab677376d71723181ec4361b744ee74db775521deeefeda1053c0653405dd3d83b0f49e9a3289ddef5f2484afb659425c90dcf033b324b04497fd49f944cef1eac3cf64f601694e5dfe594bee3ac04ecc294f48e9e8c37dd069425e31384b0891fd8063cd073025991ee963c44c3e28d00e82bca74ae364fefc9d838e10240b348bdb7df7092c91753232f8365aade208431815ad17482848a12a82eb4017ad14e6f0e07ec4ea8301850a696472f4668767737b75aa205f17903044a3842ded32bd2b0fcce4e64d3128b6ce6df520a452ff0ba176b1b1f54d29a71b1561c151705c5327aaa4d7572ee7bc752c0faa564e974213245ef4ad8054abc5dadfed3272071bf2fda28d48fd923301499ddaf7c0cabc6b6cf35acd5ea9d30fb188019f3f503e93126f84a0154215a2173edff9ee5deab39a65ec83b3566b7522705f20b72b7b31f468d011a58db0439cd606bd63003d34679c5110c4af91578cc38beb71612495142546a654b19eb1df9fac64a77125586387093ce479c1e95f031c663d7c97285141ae88da2881e943bdf3602a90f14f74f771bb33ebe6c8919764b874cfb58433640118600bc8d4028672245e5e12cfea1013eeb26bb6d1753770629249dd958cb72ccdd48be0bb2c3e8a395e1cd889a3d211e13960c46ed000e5bc5cc25bf073c860173b1e7a762b01f319bae63d8113eb654c81c0ac8c4033c4f8e1541af6c0708e651834bbbac343ff9b20d63f30449e094a8bdeeb6b14880838e866bc02cb6718b967101f29d3715b70d0abab6d01dfc65a974925e3b78274acd9c6e83abc9eeb6a30b83e48ba1e3f4cc66276cbc70365c3bb9fd7c4f594c77173da3", 0x1000}, {&(0x7f0000001780)="9cdd2fd1811589c6b386752c692f374030f670a1516d2b7bcdd30159c1fcf9aed54f89c18fe71afb84579071a6ccaeb75f1f310d7627b3e02afee23fa05f740de45dfb99d27d50351e620d1c418af6cf6d1d171b269fa0c4d8f1411deb1d", 0x5e}, {&(0x7f0000001800)="5ad0d9bdf8b2db3504061250684d0602c2bca721f7ecb4049cec5299adf82d06387136c590ac97de2edff64e7f917cbe0b8c8559155c642bf17f0bbc6ac55fe6e76c19c3a010f449a4c5064df80a0e0cfa5f548796f3ee12122584bd60c252aeb4a7332ad4950453c6b37f41832c47d6c55d31e2b249ba4c2cbcd23c34601d936f53243be51e361e8b3441bea0c99a14c6bceec8e19289740a143d255647e545c6355f", 0xa3}, {&(0x7f00000018c0)="2d08c984c2035949e00a71c7cd027c2e0ae0a77b79", 0x15}], 0x6, &(0x7f0000001980)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x1018, 0x117, 0x2, 0x1000, "0d52c1a6e57d92e3c06e0521779237d3e1d6ddda0aff37363df9f7f7e3f4b9e016f3a7ac73e0ec811dcb68cc835672dc6cf6595c054f9a7cd38b43c92747db9108ad23aa95ad6bb1acf6cd63eb92d97f32c945522db6e3090a2894ec61c456ba3b3a2d33d92a9fc6a834d5bafb94bdc8b26d177ccb91d6318f63957b4e8a7f7fdb30e93dfe5ef21736c34e71d10840e449a9d5535600a6bdc370116d28cecf6f7d3fd7e5d42b961e56addcf9b6f4ffcc888903b1b0daf2e4262c55e5add607e8ce68f48ecac79b200369dd56b89b8cae2916fccb53e69458be48e1edf47db6e4d8a46548bfed7eb266a4779402c64587f2c58e3713667a5fab495c2e7f8f9515c7a165e529d6f76cbdd04e2c4ae9505ec1553db1fbc09035f48533715b9c072e2691a65d4a442f02bf44385d304cacdb00f7d67ef488692425b448a08341ed707230732fb525b07db7ed49fde851b643f3f48469ee6eae982351d0db41caa5e958a791306a99d07467bbe7ccc8eb5cea455cf547132289e9c765e1f6ceb586dff644ae797757989488d2d1e3d9a35e0d896029ae4b09215502e7e94c7206e48c8e337ba2cfb3ccbbc58faafcaa40399daf6fca42ef434106f567f3fb81d5114b6795918d02b5e6c2ecf11c5af10f316f02351eb26e97ca5c962f3064215115ceeffe4ee0b55877edee60b583f305f4da5375eb0894aa1b5a7fc332c5e2d7c2df3d3e9d281f59ddb0c5741b5aadd48d561957ea9f03085d5276facb49930f056b0da27427dbd44dfc09f5848989615a1f31edc105b91d55016ec23c5b8461b2a5fbbd08053a634fd5a6efccf401d3f792a910b3ecc7b14ac5cf5e38ec881b67c396b49a69e781526e062872476e789d86bf36819c2fa2d00e6d5fb2cac182cb73ddec086828ffa3a6b43031654d4091f3d550a0b4c912d36b20cc9cf92ab43466baac0abe5cb6bacd4ccf4bd4de4b861756d485a859b3bcd6e35a7c0cc101fa74d8dda3a46d8f09ea3acb21ee8f3f9dc4b97e125d1ed9e67626816c6ae5708e0c9feb731d1060ae0120e4a1016c61355f78c551a5e15b153b5d00cdde52c274711a2a5bbf332ac872075bbce9bae1a44b6840f04d02123e04dc1b59c831b4bc5bbf0ee6b4669f2860bc545184e41fbe2f82096ec70d702c0c45ebe278063f4533c4973580f338cfbca6e5563f21cae8a56a89f51b6bb5c3fa1f031e4b8496e8bf340ff5ddc2be1d08961e8a82d6d9792918d366952977b647f43a99cee475a6c3176593cbe05fa48f52a6bce2176d5ecc6ab36bfdf09124c85afdd0b5a63ab00423497f56d9798f8b596ac9854be1f8285b3f16f92c0a4fdd1f1dab8c9f8434debee704ef422a272492cb2645f71deb3fd0ce24b7c6f678d1501cc2efa4151f940868f889b4b66d6f48f765460d437e186dc89abf2632b6b0e90931130851eec492f3682058ae16daca08fd781e8b6024e1e46d4b027531bed9fb563ebecb2d0be0f9cdf202e9d42af6f8754ad76323be91ddc0544b31fcbe90ecb872d5f9eeae2dd1ea231f845d1a6cfb6ed57dfa1a98a9afa0c92a0f934f7fd8ab3916e4a926e407b115754966896f3a5ecc1f11ec02161eaef8e51f11940261671d92dc4586cb8cfb426a7773bf3c78c3222f3f95d8b1d86b4de9366112528f014144ca12598a72b8a6613f66cbb826f2d2899ecd5914d7354707243f5fe9915752a0b3a48eddf5a8fd7a7f795606926419053c0af41540833492123895834495e7c7c391c82cd9364cb7699c2c0182810f303508f4e4a91cc19b88228e3be5f190fa42aa38c47786f776e100028034de105f8e684598179cc2d41585fa354614be7a190039018489dada0b5f6c89fbeae67d5c90e689f256eccbe960faac62635bbb666fc3aa04fad1b5f9331ca331ee24d40b5866737f76cc7e35bfbb1b3ad9c098f26b34c3046ed4f4f3819aab3cc2651abb2f1166d454b427b44d42a4c8028f81dc6dac10fcd314970e80cde854e54b3c500bc8903a5408b29683b8aa1ef1c96275725970e7585e85b9f207f8a9ce230c2d707ce37f8e235b243a85ced6727668725d02690ab5f805252cd67d73142d2b19dcbd62438bd27531c66d909f60498fac002259a90c649336a28a3b3f27ad55268ffc7c97d627dedb32f72ad237284ae03a2c3e64fff63a2b137bf8056a3c71f26a0578db71b302c5bf1f202bc17d94946d272d9d07deecfb3917c55c8b0cdc6558d007263b4fd052dcaf884beb8efc9df1994e817c0ba33958a9f211a8719e397edc8b45c421046baa1c25d545f675c2cfeb5adca0ce7a95108ac418b2f74bf9174d193050714925b15b96027a803147c6100a34c7579efbde433b1a13daf2a49afe89d1511e4693cd10baa0c6bb452bfe39997b5d748d10b1f0b319f46fc47c0e1c0811b0836d190872e0a4e2e507b55355849495046dc1ada9bf2ca392885574742117039b1817b92f38e491a60a70a0a84a5d86f549e8f002e654c290882485b1fac4f6f59bf449f51a3c816b78677f196f343d376744a6ea1e1ca4c0c6183a4f0474ac061a7a8afc0d4f570af0168147fb20d8eb337b1cc5b18545c7ba9f888267b1d199f02490bc5b5b4353cf6e2e85aa3e73f2b96d7fde310a5b1bc40592d5426b421893c5c7948ee3a2a3b349724354123c3a02056e2a5104e5a584de076802f69f74e4ff9045d1d9d72d104b3218d1a20a2a7da9923b5680e8f8ddc12e500261219240fef58ba69e75ce416268450384a2061879b07142a9c59bc69e9172b91047dca94dcccc2a8dd98c6230b0d12177e5a577efb3b3aea209fda037c6ba2ad949bcb8ba045271c2bc246ef6018571f42c9ba998e5a1831e2fcef7163831e29e66398ccda19b21d81d2506fb7ef59853237caf8efc429ee8608d98e9e46399fe58995ca1ca75c190930d32241ba459b96cb12b46500770217d8324ccd3e38b86f24d1df9e9ad6512ced573bbc1e22b731564d093afccfc830999795f6aaa1d806651ceeb64a9b06933a6fcff32d03a41617d43a741c09af82013961e4eea1fc6c63e00c1248e561381793af105350509d48b6f1d1655a15ce6b392691c3a3f0df2db7c5a591a86420fe495ce5a7dd27f6cc4cb99a7e89c4e101408c03ff38ac7a5a771c396d546889f3b5d9689eb4f59dfc172b9d891e5dd842585797dca0271e92fcb294a4ab529233a456747d1eef130e7b897fe3f6d859cafc809f48b56c212722e77a99f424ad975f9f650d2ac4013f44a3ebd55b41547e2a11417870649d79195b800dde681ce6743ec3e68f72e03c55b0a4b8aa164221c62a7993cbb5c5485c9e57689ec02c888f3c5751e41127c3c360efcd00128a356f9f86cbca72269b1591988c9097eef8100f978d9df5bb8cd9675d683c5542afabe374e3645e6487bf7cda44f10f102102a17664a0bf8b2f9ba1c87d6139bdb3c18c2746de6d6a3c5b000d972b1e5b0b521c1efc679b200ab49fb388a25e15dd3e927a49de81597ff8a932d35cb3ef2c35e7a039405c601a7ace0ede8da2c2d241965fe8be2eecdc3c102ffa96abc0a9571b8924f6c0d9b66d85d64a1cb9e2201fc73b84a33108371e5ad22a4dee353dd11314ef80ff9c82becdfe8ec4807e5a0138b6809e2f41cbc41170be7e28ea1a91252e639feecef4f80496caf80ef7e6f9f0aa6684141ebbb805f5cbd4c5e889112642c0a30e8f7fe1eae86f9a71bd0bf9e2cf657bda74c0909d7aa1da81f4da95178ee0510ca9f193f565b27b2690c886be45c12d837f4146f61ea971458615d1ed9dba8f0b19874c248d514708e7527ddfdfbf2d1fd45cff2a3c9ece8e1714ff7daa5a0e0fb3a73585fcdd6f5ba7e29158c6c0c47df04cf97ada5e8f458875ad21cf8dfde4a92dba7cc54c82dec5288e2ad65235acc050169d16e44fc5ca567161f9b0395b6793de0d758a00650709dff8ef3d15c5ee918c03178eae3da83b7d057f18ac99fd44f0a8d96bff3eef85c9d5124d8bfb5a03aee83b42f74e84343379c77b862c1b68e761aa8f0c466b327228f1ce9aae81bba78cb9422d8a42ac4d6e6db95597129a3537e9fca42e90d519a07ef82cd435b2675c74dc8448191cab6eeffa397d09b9647c62c5e32ef01eebd69fff44fe75c35d13f3342a881d14f74a94d5441dbfd501ebaeb8cfc3674c404b81597054436615938d1c117391668ec521c3c044e397cddee73ca148c386b4764964cc34aac948de029d654e53c7e238e654b67ffac9a446e316a3c1e52469121523dc527c58aa94b1b65ba30fd7c9f49f7701b0cc5bf1ef0a782e0d798be2a8b8c81d9387b293eba4a0986b606915eee546c835d0a3214f8bc9dcc41ae6cdf75f4daa0619f5fe238c262fee5b256d6a1e52a9fc15d4d1adc6c8f5ba20d5da9352759a63084779175c312accffc25e0b5de89f6464ef317dc6c5fc0faa627388f310ea5dde30e5176227dad96c61f82e9ffff7c956e47055eb496d02921a4551ff7e198b48cddad52ae0fedd4991341a3a3fee03e36dc7e3deeb33227f070591a128e962c977db07b7838ea84c8872830c2467ffd42540fdf3279dde7f9b595e3aad9e350574354870c1be961358ae3366aa6176264eceae908dc3f606da76380a03e835c131cfc2e0645c39e7b71206dc942ef5e9b88d37e5f8cf32f58db7a9b3bc86e61dbb863e7dc906451268f99d02b6d7c14abd3890b9040c404e01b1dcbfa9b4c882ca1e0b9e1b0f6549c8189d854d324333d462b3700f04e506d94033cc43ff6a4c3c61e892168eb0109247c4439bd0f206e644fe916c9631c6cfbb3d4863be8df5f0e258fc7503943b2767f291afbae7a2ced9ce735156ca5f26470a7c2beb41dcf5dcbba8d297f136c5840ccd75aa34e4303f755437375a0fcbca35e8d4ee6fcf9afa7125fc7585debc75735af6b00bfcfeafc4f45ba22f7d6638e18b39089da23b81c5da876fa6eb1afa4948742a97ee79f0a81e63e0beb50f2f4e22bb98e7397362c1d2bb05d10afe151b0d4e21981ad31d6e8bb027c386280293504ce8726bff4c1a54077c50a98442e96d74016a7ddb9a7d7b2f11c9cbc6ef42f1ceeb829a938b4b2e1e425018304aa8316629bf923700f11241dcf489b2ea2db151afaeabde691469cbb214ccd0dddfaace04cbc64e1b6c50b013f84c034af09c512f58b49ac1f99f39c806aaecae907410a98f2117307e22d9492e7b091ec7404ba5d4dd90f265e4933fa1efbc90555d16180116aea3a374ae9cb8d70168e68257d8a27c5d478bb68f04272c5dc7182e7839434f0108b147220c2fe84235688435448e3cd21601ecdf251e816584c8e182f25f8212916d1f4789f1b1207ce9b761ff6365c95f2b890d312a4ff929697e10cf8c55016731bd15dd84d8109fc633f6a0eb0fe5dad4f20a58744bf8bb1ec7c83ccca7bcfd4f31e1d5ebfc02d28d870bb916eeb3241b3f29c5351269fa45ed534501c169321bd8e214593a9e7844ac19abfae151f9f1556e7bc4bbabb9b6c1e057896729165f1d390ea792747a819c21a412874c7c99356705366145904da764227a15fd3b8afd9b8a16085cc95e4a38d92c594f22ce89323e82e69396a404728ed9a940446274e988468b3ff05ca95c80643d888745b9f35ead4b1ed5ac725359df88c15bd8f85cb0dae6d79b1f7bdd063f34315a05364ab637474044d7083f2ce75d16a0895343998434d86ff0e4dcd4cf556ede4a4fa748c0c7453d4a6f6196e393953ea352b06740e60a2f023e5c708f174f729d3e229bac414d83eaccf3f"}, @assoc={0x18, 0x117, 0x4, 0x1000}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x3090, 0x50}], 0x2, 0x0) 07:13:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3f00}}) 07:13:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0xf}) 07:13:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0xf}) 07:13:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0x2000}}) [ 380.154363] IPv6: Can't replace route, no match found [ 380.183299] IPv6: Can't replace route, no match found 07:13:54 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13000, 0x0) 07:13:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0xf}) 07:13:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0x7f00}}) 07:13:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 380.587083] IPv6: Can't replace route, no match found 07:13:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0xff01}}) 07:13:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0xf}) 07:13:55 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13100, 0x0) 07:13:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0xf}) 07:13:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x1040, 0x8, 0xf}}) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write(r4, &(0x7f00000001c0), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYPTR64, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0x6, 0x9, 0x4, 0x0, 0x2, {r7, r8/1000+30000}, {0x2, 0x2, 0x81, 0x80, 0x81, 0x1, "9ac9e5dd"}, 0x5767, 0x3, @fd=r0, 0x3, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 07:13:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0xf}) 07:13:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0xf}) [ 381.272766] IPv6: Can't replace route, no match found [ 381.278316] selinux_nlmsg_perm: 220 callbacks suppressed [ 381.278332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 07:13:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0xf}) [ 381.392004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.451886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 07:13:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 381.529127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.600306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.664895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.739478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.810628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.831005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 [ 381.850381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15930 comm=syz-executor.0 07:13:56 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13200, 0x0) 07:13:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0xf}) 07:13:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x14100) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100)) 07:13:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:13:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x1, 0x40, 0x1, 0x0, 0xb134, 0x3, 0x9, 0x4, 0x6, 0xff, 0x30, 0x3e, 0x0, 0x6, 0xfff, 0x3, 0x9, 0xe4, 0x0, [], 0x86}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0x0, 0x100}}) 07:13:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0xf}) 07:13:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0xf}) 07:13:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1ff) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 382.537462] IPv6: Can't replace route, no match found [ 382.557681] IPv6: Can't replace route, no match found 07:13:57 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13400, 0x0) 07:13:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0xf}) 07:13:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf, 0x0, "0000000000000000000000000000000000000100"}, 0xd8) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r3, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r3, 0x7}, 0x8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000090000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef06000000000000000003000000", @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x101, 0x2003) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x410000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0xf03, 0x5, 0x2, 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0xf}) 07:13:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0xf}) 07:13:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0xf}) [ 383.245444] IPv6: Can't replace route, no match found [ 383.273689] IPv6: Can't replace route, no match found 07:13:57 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13600, 0x0) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0xf}) 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) write$6lowpan_control(r5, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0xf}) 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0xf}) 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0xf}) [ 383.886182] IPv6: Can't replace route, no match found [ 383.901411] IPv6: Can't replace route, no match found 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:58 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13a00, 0x0) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0xf}) 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x10001, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) ioctl$KDDELIO(r6, 0x4b35, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r10, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x332, 0x0) 07:13:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0xf}) 07:13:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:13:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0xf}) [ 384.541455] IPv6: Can't replace route, no match found 07:13:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0xf}) [ 384.582337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.589106] batman_adv: batadv0: Removing interface: batadv_slave_0 07:13:59 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13e00, 0x0) 07:13:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 384.650684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.680099] batman_adv: batadv0: Removing interface: batadv_slave_1 07:13:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0xf}) [ 384.723357] device bridge_slave_1 left promiscuous mode [ 384.728916] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.781923] device veth1_macvtap left promiscuous mode [ 384.801219] device veth0_macvtap left promiscuous mode [ 384.818174] device veth1_vlan left promiscuous mode 07:13:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 384.829178] device veth0_vlan left promiscuous mode 07:13:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0xf}) 07:13:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 392.655392] device hsr_slave_1 left promiscuous mode [ 392.694813] device hsr_slave_0 left promiscuous mode [ 392.753588] team0 (unregistering): Port device team_slave_1 removed [ 392.767392] team0 (unregistering): Port device team_slave_0 removed [ 392.777735] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 392.827776] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 392.897631] bond0 (unregistering): Released all slaves 07:14:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000080)=""/1, 0x1}, &(0x7f0000000300), 0x20}, 0x20) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000640000000000000000000000000000b866fd19c8dbd2945f4a84174cb714770000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 07:14:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0xf}) 07:14:07 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)={0x0, r7}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000040)={0x2c847474cadc8e02, 0x3}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x226002) 07:14:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000002c0)={0xd, 0x80}) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r2, 0x3b) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000300)={'macvtap0\x00', {0x2, 0x4e22, @multicast1}}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$TCSBRKP(r4, 0x5425, 0x5) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYPTR64, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES16=r5, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x80, @local, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r10}}, 0x18) write(r3, &(0x7f0000000040), 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x5, 0x8, 0xfffe, 0xffff}}) [ 392.957647] IPv6: Can't replace route, no match found [ 392.990510] selinux_nlmsg_perm: 110 callbacks suppressed [ 392.990528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.021914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 07:14:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 393.056898] QAT: Invalid ioctl [ 393.063257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.115420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.142271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16142 comm=syz-executor.2 [ 393.165757] QAT: Invalid ioctl [ 393.195234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.244439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.260575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16150 comm=syz-executor.2 [ 393.264337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 [ 393.322444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16114 comm=syz-executor.0 07:14:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x13f00, 0x0) 07:14:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0xf}) 07:14:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x1000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x40, 0x0, 0x0, 0x100}}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 07:14:07 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {}, 0x7}) 07:14:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x3}}, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)={r7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000540)={r7, @in={{0x2, 0x4e21, @rand_addr=0xfc}}}, 0x84) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x28}}, 0x20000080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000400)={0x4, 0x401, 0x7, 0x3, 0x1, 0x2, 0x18, "704d7fe8eb679bba67072824de326b832f8f731d", "80cca2874744014a1925fbc05308aef2f74415f4"}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r8, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 07:14:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0xf}) [ 393.485068] IPv6: Can't replace route, no match found 07:14:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xfffc, 0x6a26}}) 07:14:08 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@bcast, @rose, @default, @remote, @netrom, @netrom, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1c, 0xfffffd1c) 07:14:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14000, 0x0) 07:14:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:14:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0xf}) 07:14:08 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = open(0x0, 0x38f002, 0x13) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1c0000000000000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10800, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x80000019, 0xfffffffd, 0x4, 0x4, 0x8, 0x7, 0x4}, {0x80000006, 0x7ff, 0x2, 0x7, 0x5, 0x5, 0x7}, {0x1, 0x4, 0x0, 0x8001, 0x7, 0x5, 0x8}]}) [ 393.771872] IPv6: Can't replace route, no match found 07:14:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14200, 0x0) 07:14:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0xf}) 07:14:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000001000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 393.996345] IPv6: Can't replace route, no match found 07:14:08 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x101, 0x8, 0x16, "f93ef7d561cc64428d9e56f3778733f2575c9577b6ae04138b803e567744d565533b3fc1690a0c042c6f192f356e4b3a8c55a8f7b0aec0e93c610285", 0xd, "b70d8a03b420a3878e39f4f3c7bc8e65bea6eb38bbf763b679ff336559e468c267d7340890aad82f669e35683fc95dbf5e9eaec1c928e194b424f9d8"}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:08 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}) 07:14:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14300, 0x0) 07:14:08 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4600, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{@none}, {@fixed}, {@none}, {@none}, {@none}]}) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000040)={@local, @broadcast, @local}, &(0x7f0000000180)=0xc) 07:14:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0xf}) [ 394.255595] IPv6: Can't replace route, no match found 07:14:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x48, 0x84, 0x1, 0x3}}) 07:14:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14800, 0x0) 07:14:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4100, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0x8, 0x7f, 0x6, 0x2, 0x0, 0xffffffffffff0097, 0x0, 0x7}}, 0x43) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r4, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) socket(0x10, 0x80002, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmmsg$alg(r5, &(0x7f0000004080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="01039308f2b2b588d8bb56ebed0c54cf45ee58f04f5c3f5eab8e4d8ea22dfa49f91f6e19dd2ba07657fe6f1349086c459bd71e242e6d91649d8efddac2ab834f64074ac7ab1bc0b41b15a1ce54e8ff30e401aa4a4e85f07aeb6a7146f01537d4abbc856b39a7d8b0f47c5543a72e15d5661ec63ae2e6dff8d6d5de711c4999e10f4af7f787fd120f4faff2ca41f72889968966ad0557eb7e79efba162d8e88fe6882a20f8518d99c04c9934a7b1d73ff9dd151af44aa522a545896beaaba8f7e501932680ee60fd754861462f4872936d64263586f86c3b85528da7ae98221ad7b235e5520cd9d22001ed56c57", 0xed}, {&(0x7f00000004c0)="fe8d320d8266a8fe06a7a44e4aec27c76aba462df8f3f865b0f909cb57c3334eecaa4d9df4d99313a9d1bb12e8d9f99a3e189d062cf12a70c7a31300f2056b18e63f515510c1146202c55d86a3e0988d5d", 0x51}, {&(0x7f0000000540)="62c2b3974c9a2aafd8388eee4896918b814abbb888cbd10cc8dacf4c6822bdf16277b8739d0be02f1de6c9d31a0a89bf442fed63f8ccab4d4d87144f9c981b2481dd0dee78659763ec7333f7c09097db350da40679aad897dd77881c44dd2fb9b0f3bcb145c0907f1b", 0x69}, {&(0x7f00000005c0)="7eccce3f7d73979a4d7b", 0xa}], 0x4, 0x0, 0x0, 0x804}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="43b806e4f0fa76f90bae5eb6799f32cb61f80695d2293bf0185104ff29386f38f45d51fcb61087482f67adb7610c3dea20da78605296b258349f7b011c3033082d1e2ef8d1092d233bc0b9c36ce5e01e0e37c30547da019fffc981a750be6e08eb61c95f9962037400a0dc56249fba7c22f40fa5f2cdd6253d66bd", 0x7b}, {&(0x7f00000006c0)="73a4609e79fdb8dece83c793cbd8c523be8b4b3306b725258ff1dc9f833d37d39374deb6bf191daa153bc0120d4da1d56301ea9a835d172fc3f2892467eae5a6456267e0f556b9ccaf26bbbc49911242aa7d", 0x52}, {&(0x7f0000000740)="0f70c298fe0a5742f7f6c1c01c1b782c80dda86c1def277e3fa06ea81cb6078094537ab0c7033808e656238b17a3bfd1cfccd7aa8178d75a59f4deb7275ab5d54f7ed109c0f103365cc888efe2bd2c39febd5cc0c456c5565cea", 0x5a}, {&(0x7f00000007c0)="f30a8bdf85b4780aeb3fedc590fd10077d6b5595d3513483a9e4e4265346858b9febc9e888505a4755a3cfa0d244396633702c4a2f7db143025739076a081496e3664a4b8046de26d356c1a9f3479fd9528e4b11a244cc64584be823194958", 0x5f}, {&(0x7f0000000840)="e865247f4988caf48bbed12ad4b894178bc9ea7311393f7a935cd04a7d642ff19f9912b8e92dd9c63efe78129c0714ea8c88c830160244df3428fe47a90ac0ee84d6ef4729fefa251f0c45aa8e45a82618939d5e0a2f9095d88cb2ae4a8bee274107502a108edbe089f6f8140bb4fce624675e2795bb51c37c38d4ba1b58c2f00c58e31c74439c9c593866e3561cbebea1488375919a57cc384301cf0299bb540ab186daa19df410764a189ced72ef", 0xaf}, {&(0x7f0000000900)="e58f3344d82abc605c2b4a8c311e2357da3502d1051bf9ca06a5c2c844a5cfbae2fe4965f6b4594840050f9b5f3a05ff", 0x30}], 0x6, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x58, 0x117, 0x2, 0x40, "08f43463015c078e0e8d800d22b63131c0b3caee9da8559c0104d34c04544c51853a77a7ba6f52a3844984b8f8a4b149e2ef571cd2a4eb121103c121e31b3f52"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x48, 0x117, 0x2, 0x24, "e9ceb51d639e338fbffb24907f559e565468014f7f7b72eb0aa839eb3cb4bdcbf192c5fde4300435da79afdd3e"}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0xf, "6045232942ad405fb16565d0a0e82e"}, @op={0x18}], 0x128, 0x4c040}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b00)="2e6c7a1161cd5d19cd110b1c749cf199c32e05c1ec1e12e8515d59f2f791c4725017b8c1b8a4796f077aab9557367ce1111384e842ed4b02eef02e85b77aa85675eea8bdcc1c7d19f54d8becbf3a692c1022d130e7ccc89938c35c332ec58feb63420bf13933138014e8b6d412794d7a469e1fc638af2c0860c1efdcd946e5e9faa04bd9d8f171045f2f0ac999f92718258b3dde177d521ca24c50562e15693cc98ceb2fd635ce1045d07fda3b01408f5f10aa3e0ce14d473533c32203ae9f502568c9d48d34b9919f10bcfe4696e61e84ce0f04bccaf10579c7b1ca668f616270a35addaa53", 0xe6}, {&(0x7f0000000c00)="52179b933e97dfe7a73e68632be1db070b6dad245efe14e1aca98823dd72bd8e350d4f913c541ff37316095709f376ad6a6f164b0431ca2676dd4f4cda4554ef25116a81d371", 0x46}, {&(0x7f0000000c80)="2bc475b48b9ed666a14151a8f9f919e6cd9f4105de585bd10ca2c85317018edbd1ffda8bdb1f6278c31c861707a26f12f2d4caa321d24abe9efdd122d505367bdef96428a639b0f978", 0x49}, {&(0x7f0000000d00)="a40adaa3c96a536ace4f5f3af7f2aed562dfb301460da21c9640be422e542f8fad816166904d7a77b7581b16b6be1fc31cc09f09662c38ca6a3112a1d80ee8c9814db21542dbfebfac3be5de8860230782eb557ab51a5ac8ac604b0e635f828f1b9e16288058e6ac220ed71eb2c4db695082468be2ac46704c6b1b4268458561f4b44286dacd275f4f725b5daac3018c5f4e945d1f9592cc165dfa43f2d8402301520323784be4d0b9d1b46597c0fd1a1804da87bb01798e8885b4a18a773a22bb9f7a34a542bac434cfda6e88bb603061a75bf8ffea237abd241e80644ed2c83a456d09ec32cd37a5a9", 0xea}], 0x4, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000000e40), 0x0, &(0x7f0000007400)=[@iv={0xa0, 0x117, 0x2, 0x8b, "f6baa4b1958e9595261cef3c979dde98adb45c8fcf2095cbb61e5e8c0c579f6cbc3f8ebfaf6d572bd7cd5cbe132a20368b8e492fed8e98bbbea3339678194210f01c774ae483afaf7f03abfa9f604b4a7f19c875ea883643c8ecd1dc7b8a2bc80dfdd4bb61a608f17d8ca0548e0ccbcc0b9056d7fc59aaa84029540798d638c8c45a2874e1d944a6190e32"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa0, 0x117, 0x2, 0x8a, "bba5a27a0cef3c1c61666bf9292f4c13e113cb2d28e7174158a23ac70cad1ad6bcb617684adfb68d75d5afed6035fc1058e7869cfd06ecf50c0ea42a5e5aef1aadd950946c4bfd449ecc4b639a40598ac6e6a8f9d25b0dbfe4d10bd570de89fa50bb66860cb9d626432db2b9da0f659e3764e8ab9df7bcf7449684a3ebd2e943dae51a9f9028cbee9ce5"}, @iv={0x50, 0x117, 0x2, 0x37, "abfe30f38fce8084a23c58f76ebf02770648fe1dae3ec9622dc73a47beaaef6620e1620601d547da98281645c3c2b63ddf7a2860e81b8c"}, @iv={0x58, 0x117, 0x2, 0x3f, "4b41d1d747b4a59302edef72382a6f6f237ccb286be31f24895eb34d4608755cbcdebc0e7177b6d54135220556092699914e5ac20e3ed76c8dec385e0705f7"}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"/4096}, @iv={0x0, 0x117, 0x2, 0x0, "a9c13d8d1c9a0b3b6c517b4ce8f8c8a4b8b3b6a222d1f8bc3b69fa6d3e25099f051cfd96015b5518944864970768f984b0c871d36d9b121ee81c394d3fff006699363ee86e88676111e62894658cc28a2a5c648e6403fa0a8ca73fabbdebffb56de04d7c700a68412743de68054770516293f32cc87030776f4c9098acd3fcf20805f772823b9a8391"}], 0x3278, 0x4010}], 0x4, 0x1) 07:14:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0xf}) 07:14:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 394.538764] IPv6: Can't replace route, no match found 07:14:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c1bc6832d0007050000000000000000000000000b0b2e3bcd40e34d221053c5", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000002310df2908000100000000000c000280150098280200e000"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x257534a949a7a499, 0xffffffffffffffff, 0xbb658000) 07:14:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0xffff, 0x0, 0x100}}) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000018c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x78, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4e, 0xbe, "df543457f32cb3475d1f60a4af967d7d6d8d008960f5bda1bf6f38f44d7cbc4ab219678c232689fe6ff3876c581d47f1467ad38159f759d278f4508e20cf6e9d9c087d1397d26cb7ef25"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000001700)=0xe8) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x8, &(0x7f0000001540)=[{&(0x7f00000000c0)="8ffc2ab170a3d7d976505dabf8c01395342f5711cbebfd29993eb0aba419807f23a9d8c764a4555745f9ad74c4ae65e2b965d3e98138eab54b996314f2e43efebd32f41f490a9ef98b907d7da88f2a06faf5f85499b086fc6a6324809826105da866111fd8027b603caf050016896d5e479a0d8994989bd5bb5d7d00bac864425351978564c8f1c5e5d9bb3793669f2751f86ff089e6c6d76f8eadf0e37f69dcc92ce3178edfde454ca07a1aed7f9a1736bfbc90d38312e8d85cbf2601990ea9f7457b967ad0484b56dc6bc984b4fce50930d1ed0188517beb43c8cd112db360de766888c897a4c3951282ccb54b00c6a9856dfa5332fa0ce31c2a8887e592de9c2a914f783ee232356bda50b4d6cd2dfa6cb67ab2b89bf05646ca85fef3b2d17e8e3c8d7bb0eeb3799faba9acb8c2e875281ac4594218d916f7b74ed7de2200c6a76f2ad4b8bd0c7dd6756757d2e77ce99601dbdfbc58a826b89f562470ce8381eb0714f728be23dfc4b102f403f95b108165443c9602fa06c02f7b62bd3726fcf6479a5800b4640331331c6ef72cc786c4e203afb793a9d7e3c2954ab75b2944f6d75906d49ef464b29bb42a0a21f696d85083edc42333ba3622958e02a6b9cfb61aca0fc136fed774f1324eda6e6c8a1fc784fedb551f38ae8856462454ef9cb6ce3d80f5a19835b2dc43110b3d4282d198a65958c7e17bcad2f5f7eb539d0435fe69d30f452f4f4f4031481588d2502a717127b7d95473fc2cc10f9bc1fbedd1a6c7eee9ab034f067c0a789f7c6946d6224c6170c0a9777f6fcd68d5288860612af3e9dace3a459aaa3452ab2b86c2f11b0cedad3b05123bc962e8e3c276781447727fb795cef883649716380503b2d9fcd300f5525761906f561b74821d05e849cae992ee48f4b435f429c89ff08ccfe0c8d242b5fffd66462601acf5e9f97be42c0e4eb11e3a55606a2574be561f3d4a700a8dd00857883334db3a68c95da8f72886682460e3bf36391efb60ee54dc3faf63aa96f15b5474acfbb31dc1bd22a42b4df0a13af8f3e51bbce54ca5e80ca7582446cd1126e3a3bfc37ae7066f66e82686379d1482f6e5bf759102895dc1c5d1ece6f71e8b0e7542cb56be7f18ccc1eb4270022f30dec6b0750b81cb2bbfbfa7504065964718d38e372b005bdfaf5eeae3063355bcf94c2519689bd20ece5b7e26e3e7b25770223219e48ac7b15340934acfe07171ed8c7d38b511bce32f8efa2a1aa7eb15c208638ac90a8492ef667883efa8cbf70d391c0ede5df8461faca20c016b053fab020cd24cc86598fbfab480904f33d572cd9df8e829df80fb56c4e866f6d7d7d9ab84dbf4f8404226524299c8b0b0cd088b2737d496784bc3ec34bf89622a21123b98f656225de49b7798af170e99228f71e3a4277aa3869f2654e3e09a791eba892fd3180e909bbf66ae2cc23a31c4c298cdcae5717edfbfe9d5ebaa6b574aa58b73c21b4ad240778cd49322e4ce927d41c31c3ac3499fdf50bfc7978f3bddb9350cd5c9fb1e82fafc3f9df2d89a49235be599756e832c7856b743abe8af208fee43116c05a0070c372f8d6b13360197a26a47a1b6dbf222c5684a2324536d9eae9c19fab1ff8e8af77ce4d51ef7f292cd81020732505ab43bc8e944991f4a67daa1f13666be597013967cdb3cb19feadf55b8fed38b56b307e861bc96616f9fd4b681bb5fa2f3c86dd57b7e35ef5b3c71c2bde1f7ab193ffa5337eb1f12403d5ea69bbaf19b61948dd5c7add156df560765609547ae2cc46349db65170c0068b5728f9a11741f6acb34a295ffd4cf7e25aea4926f2ecee630703bfdcb91baf7f6730833aecf27d7e8703e0f0b4e1781deaa6f23099eaf7f26f07f2a143f23062a3c7639fb806c430b9eb069d2882fc3d5f1f2216fe42b295220866a03ff7eece31f5f817cdee9159fdcefe0bf6aa6054f63d514f66262ccde231585899e4476da6ec10521cfa7b40e07d84d535532344e24a79bc5dcbf4d3147bd496c650fc62005ad03621100b89f1ecf1c995519978cf40a8d09748cb5ee397a648d9422c11cf83942c684de974752b7412d084ffc1d0d6b927842d181c397f023694bb1649ffb8bc7658a9a80b77d42e0b6172079596d84f9b337bb0d369ad733b31102e163dab129fbdfaa2778e3da2a99ed7ece06ae5ab97a916f762fb49b996cd7ae7b0301a29dd2b1552028c938ecad989a451e2e479eabfa92130ca7f9a03a2c60521ad4019280ed3a2617d6088ec437ce94eacf64f1dd82209297ef7f4ae3f143b8f3a90a01b20ba491d77ee3c09cc8c116baae04d1ff5b9ed3eb8a875a380a0f3179117f20e636daeea17146f9541c1c863af6a8844fc0aef874d59f6789310e674124eea3ba47d6bb8dcf3995e3b5886babb97a1b878e895670e2cab7ccb9e508da9e600f2e1080c3e47ca58d9a8f2cc42c649af01db8a6a3ff9276dc959ba6fd9837081c9206ccc8fea76d0e1b5cdd7fe5a203bd18c03ed548a0c1dcff017efb1b4ba4ebb70da8cfa4b37514e552fce1361bd884b45193b20fdaa0718c098c53848769ba5b6e59dc4caa32d188c8141f3dc0e29a48ebf14f735fb458ffedd5f9ecbae9393a0c8e20e9d355cbf7198368b77a6a4841adb29d70f33c1f9ac49f83077a697565fdecebc73a847f1fb26f6867983b792f80f2d401137bae5257bfb889c2e1b3a026338643299993a8508beddce83488bf96b600de209b5b38772346c2b130a405bb03ba96243e72f0b8f4e45833465d87e57129dc13393d9462a26c8b0b3af6fa70a328335fc3892172be346cb0b2577290dd5fe7fa012f2cdf060632ed69bcbfc56cb4abd7dfc931c7cff52240d3cef95154fe10bbf0d9742a22fd8492a565cf1879ddf418bd5b3219980bef25d8ad5f43c397091e1702a8071418da705d9e0993e8da04c71ccd79db05aa61f01ae1fc2cef1c743cce9b1d3a2cb31bc8884824e26ca8ccb63f6b6f1f672f6671b39d71f51ac5bac10608dcf9fbe64269a46528ebd42a814b1dd50c1992a5326133e306d4731ca063d4f157cd2d736a0a350d2b84a11a9e39ff2947ed9ddee7d1618dad333a3f2d3ccad4c009a2a5c2dd7bb576f9bdced6e6af6092070c0d1627a20e26254e9baa156f22633371e78d6334f9692c7649a7c0d4d60556785d1a8fdc3a5298448eb3babafb9430a43846ebd0998e4c7e7ed02ef3554b486540fddb72b97c6ebde08a4b3f69fa402e111910e38d16d00de1cd4951d48ffc96cdb7feae2df4596ee9c0bfcf8a15172273a9503506bde006a813aeabb192d5cc417d75617b57af37e76c7aa3b1681fd89de16a0dace8c9f5eec3e24be9f8fab911551e86a00963b8b5498e923f6ded1a827a0a5c6bab19c4be792fd5ec5bd9db32021bee59b6bb9ee30521bca9df986d172d9c1c8e5260b1bfc7d2355db96bed6a344da57df91cd3147a5391fe171de68998d10b9b9a3c5323138208c2ed43725a202d25bc6228962ec112054924318b13877f9c070b131115d62e958ed4d39bd87fc8dc647a5b01775c236f272ec50f021ffc437d60851e87b84c4e634c1f1e80207a748f2f444c5c9f6c892ccd6e8f27f12e7f777480295305c9bd2f22ee248745606e6b7287f9eaf50787e636326921d8f1f4a89d9882a1498348f0fcd44c8e235ba8a7979a3feea214ded89098dbff2fe7312040c464e2bf4c44d5793814faddb43806fe3cc805aab3bbbf141af83da4fb8456b98241adcd07eac45905f90aa853b8bcae6eb0cddd90327ef370f2b5a25fb9f7ec9f96a2aa21ee3584e442cf07477d19bb427c26fc956e5297e61e0833bc95ca6065c5a0cababf011e7e4d4dfb4c6e7c91b4010de41a8be4bbe92ab4c3c5924ea83753177adee81163b7d7bd75ba63a2dc7f2fb179aa20ec5c024606e3b4d507e81b769fb15c4db614cba3f7d38189f0b09bc44bc482210e6ceec5e15d9c2fea88ec1323434ecc1b33da7ca54e943ca59cc21bd36974eb216393d6b1ea7959d897e8d0a1aac9de8d3dae8f84b1b52c4740e227355c047fdd21a00c927af3f536f41519101c956a2a20f5d8d8daa1a0ad8ffda4ef2effb63e15a84a2e0bc1424ed70b1e964ffb874bbcaae8b03c522878af276c016c9c91ffdc7b79a35add5a769cb516c47c8942c453bfb16f2a04db10a62487031d4ed357555d81243915f366e3b0304008487e664d50f87427ba5d9f2d191a0f2f5dfa2cee3801c85857b81a9656737a3cba06e6be971b2ccfb21e490a461a59393688c7aad0cf04599149b5038d3ef683ae07da57496c7a538832ce24bc2ff0f3435b64d4fb553cc8de1d232c03bfd8cecd440f52df49e60e835892131f1bd4364898f14dbfed0325eb9b48b8add8f202ff02bff4fe6c5579c7ded33398602dc519f00c524cb0af80f4338dcc5e6adf82aa67cbfc40212d0cef83247b4172b87ca5c23898b01dca065919142db951aab8eb2fd82d3a308f8e7a2cb4d6d0f6149ed6e2be7d26cbc0a131fbc61131c9b585b58d8ed3280a9cff0285f111dca3b8d85a61d35c2ebfe0565c251bd40b07475061234c9069585fd9711bf2a3abb5dbf4c3079380468e9c70ac1016216fc7e71719225331e842aa1b101367884724500b6f39f956b04cbe8c89a90be9a0e9c57a286c0caceda0d74cd7aa04f77fb33b8cf1009fc17652a037e8529333e95cfaabb24479e221495089375bafd82e11a4f259b100f87c930daca0d201c9673795b31e5afba9257c63be888e77c7e85e519c23eb5fc23a044f0a4fcfc6eea938128912d005d8f644843109e4e42891aa2f62a3b9d4bac2217fc93cd90c118e65b50749c0f51215556c5e42ffb5d7498cbb1ea40c926b03eb1a09e752c39da671a0dd7c631f6c0daa7c76ce783ba9386626b90492ae2fdfba8590f4387a072aecc04e438481c935079981f609b41979fa354606a038f4da9763201bc0f2fec14105d77c0fc43d68f6caef9924bf3e8d703483a918fecfaa8b9d877687b01c9f0ba0d94e338cb9071f77c2679a502f70a406134e7fc1692e12d9ec403d8db428bfbb830b574ef0b9eb795a958880ad4df98b57a5de33b2e4e9a1a84151f1054ca94e5ef840709713a963bfcaeadc47e4c070cc3be605cc782ad6f4073e910506dee200a4fd42a82eb558d83c1df3821e9a2b55e576a5012e320c634e2c11e8e76978fca6b20bb303a92f0321cfed2b2c629bfe9f3a0db500187b57fa8bb863b03b8fba21640091d85965e2e7bb855cfed436bace89b66c1dbd2a71aa5b449a1317e8d021cf8fef500cc7741318b3bb79e36865107c1d31e7ff0df39a0b376d6b24b32076dfce72246925dd4cd096c3f4d6dfdbb93a8dea092998fbea6036f10743f5ea1137ec27da478a9f0d67988cc058e4fb3b2290bb78e775d3e7836e5b37b7f468379a0f2bc28deb4a0832e0396a03b47f8a9ed8947e565c256baba9ef753510a57af9101bf58e05b2bba8da38299db5bd98f29620e4d136ec68d6d37d30a93b98384893f26c4f76ad9f0b3610b9416ad30043bfb9facfed402ad051dddf1846de9a5e59c64a7fbc44befd053ff98b5bd2aea7aa88471055d0d523985462c216ba599be3333163d603e57252a0c201d8b3a580263b962863b4b1ada92f94105e498bd462acb0a1ee34558e83d64442798b8af58a5210d0d5044e1f2a42202febb126068e3287535e50f350e381fa2642572d084bd25e3f720d2f106d3d3595b45c3fd8a69a9486a0667426096e572dfdfa7cbf67cbe260d77ed8876fc378", 0x1000, 0x8}, {&(0x7f00000010c0)="c312696bdd9b9ce8566cfefb096f8ee9c325ae070afb30a27b6fda308f4edb408b4946f64a2be93760a9b9b9be79c9bba692167b396bc57943ca7704f124ab9e3f5c939d87b806432137bd8917fab2c104463bb6eb2cc05ed075c4752a4f3478a5742a82c9ab7d9fd66b70ecbdcd113eb0eb27fd96b00351e948ea54121e3ebe31aacf20bab16a7c15d28e51a05e685c5d0758de427677587ea4027db1e82955f1ee00a0d2a530c7cac06543bf30d590dfbd043d6167776a3fbd3e203e95a98dfb40d3f7d3", 0xc5, 0x7}, {&(0x7f00000011c0)="ec34bb8f4b02ab58dbabb493bd8ae064bb2e9a232bc3215ac8b56d6b116c4f82e6f545c457bef74ac1b8c01d8640fe1fca0cafb7d8a9d4eb978c43e8a6e1e6b7a49eeed3c5d00504771509070c0a8c74dad7e2b353e903fbd7a1be24795b4b946a1c38e56a23453056801cf17b5593caf1aaa0a303313223e3d2f886d127c6b22681e02486b5307b20f614", 0x8b, 0x8}, {&(0x7f0000001280)="25744ff09143e8cc662b6284f54f1403e3b2cf019a962d729af2d4e710eae5cde806ccb69ee3a6", 0x27, 0x8}, {&(0x7f00000012c0)="46a83e238f689738f68e2e9b26506ac6993351d5abd3b5f7e978873199e97702c170a22324de2f2b7023830fe0119effa119f71f109b01c33b66a770f69b8fecc7e81df09d5011a81a6b90ad19ba768727d067edf2220691ca2e4b7695963d86e5e169304b8f78d30772e5017b6fb5da5748a2f56546f34dd9448f045fffcc881454", 0x82, 0xff}, {&(0x7f0000001380)="641891930dbd32d176272321f8555a96042d4f61ba7d26a941f2c6f6330c44def3ba2db78a6c11b7cd6b0a89b95760ef741f7950108a58768203dbaf0bab52957007784f476e1246a336f0210d16bdde6ba9f912a964b211e89afdf79b3e196fe19b3cb4849ef0436efc15f7e5c117aafa9c8da0ce63af898f99e332d84f6be92cf865a2f7a7f2477e7f23061ef0fdd250d3e3da82c14cf5561be789a124aad758a65e5fa252f5e947984f61f8d6eec3597a50fd5bcdb357a70b379997733eb790b8e0efa10b06a74f9b6d70cb5a", 0xce, 0x8}, {&(0x7f0000001480), 0x0, 0xfffffffffffffff7}, {&(0x7f00000014c0)="084286ca1b9713ef6f0e365b1f4c2f4b793839b0c2e1b2750b2dd981b36a8354b450afcec29e200a1ebde15a005ba5805f56187320461c7f4178c21d79d37bfda309ed548f0eb41de8", 0x49, 0x5}], 0x5e05262041c7c983, &(0x7f0000001740)={[{@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}, {@noacl='noacl'}, {@noacl='noacl'}], [{@uid_lt={'uid<', r8}}, {@subj_role={'subj_role', 0x3d, 'loself'}}]}) 07:14:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0xf}) 07:14:09 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x80, @empty, 0x80000000}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r3, 0x6}, 0x8) prctl$PR_SET_FPEXC(0xc, 0x10000) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:09 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14900, 0x0) 07:14:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0xf}) [ 394.876228] IPv6: Can't replace route, no match found 07:14:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:09 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0xc, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x78) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000180)="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") 07:14:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x81) 07:14:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0xf}) 07:14:09 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14a00, 0x0) 07:14:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 395.269599] IPv6: Can't replace route, no match found 07:14:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="e17aeb5b0159f6027f648c501990ba582ca55b1ef5c72d578194bc0000", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x8000, 0xfffe, 0x100, 0x3}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r9) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) 07:14:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x5, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000000000100"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:14:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0xf}) 07:14:10 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14e00, 0x0) 07:14:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 395.561661] IPv6: Can't replace route, no match found 07:14:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x3}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000cfda82eda0098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:14:10 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x212800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000300)='user(\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r4, 0x38, 0x66}, &(0x7f00000004c0)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, &(0x7f0000000380)="06bba38db66a8dd61e72a5a9cc5c609b32a840290c9206d77082ce6f50021881d77da5c3a040609a832d4cb5a45f26b74b8d88726ef820c3", &(0x7f0000000540)=""/102) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r5, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r3, @ANYRES16=r10]]], 0x7, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x4, 0xfffffff9, 0x3ff, 0x4}, &(0x7f00000001c0)=0x98) close(r2) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x4) r11 = socket(0x1a, 0x3, 0x50) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, &(0x7f0000000240)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 07:14:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0xf}) 07:14:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 395.784253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:14:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0xf}) 07:14:10 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x14f00, 0x0) [ 395.867630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:14:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:10 executing program 1: r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)={0x1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) setitimer(0x1, &(0x7f0000000080)={{r2, r3/1000+10000}, {0x0, 0x7530}}, &(0x7f00000000c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r5 = dup(0xffffffffffffffff) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000200)={'team_slave_0\x00', 0x401, 0x9}) [ 396.000724] IPv6: Can't replace route, no match found 07:14:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 07:14:10 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0xf}) 07:14:10 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15000, 0x0) 07:14:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 396.177872] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:14:10 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth1_to_team\x00', {}, 0x7}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 396.258549] IPv6: Can't replace route, no match found 07:14:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0xf}) 07:14:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8080, 0x0) connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2}}, 0x10) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r5 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000440)={0xf000000, 0x3, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xe04a43e7353c039f, 0x0, [], @value64}}) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000480)=""/80) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f00000001c0)=0x1014830, 0x4) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r12) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYBLOB="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", @ANYRESOCT=r12, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRESHEX=r2]]], 0x7, 0x1) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x7fff, 0x7, 0x14, 0xfff}, {0x0, 0x20, 0x20, 0x4}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x30000080}, 0x20000000) keyctl$clear(0x7, r1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 396.296580] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 07:14:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15100, 0x0) 07:14:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:11 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'ip6erspan0\x00', 0xa4}) 07:14:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0xf}) [ 396.543770] IPv6: Can't replace route, no match found 07:14:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15200, 0x0) 07:14:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:11 executing program 4: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0xf}) 07:14:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) write(r1, &(0x7f00000001c0)='(', 0x20000339) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x100, 0x0, 0x0, 0x100, 0x4}}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = mq_open(&(0x7f0000000080)='trustedeth1vmnet0\x00', 0x881, 0x34, &(0x7f00000000c0)={0x100000000, 0x2, 0x7, 0x4}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') r9 = socket(0xf, 0x800000003, 0x8) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r10, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff0800003326f6000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001030080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000006000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b67c0000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f00201152497303008000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000597000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000006000000ffee0000000100000000000000001000000100000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039"], 0x3}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000001b40)={0x1f0, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x7, 0x3, 0x3f, 0x2}, {0x2cc, 0x0, 0x3e, 0x8}, {0x1, 0x50, 0xff, 0x816b}, {0x2, 0x0, 0x4, 0x474d}, {0x0, 0x2, 0x7, 0x100}, {0x8, 0x2, 0x6, 0xfff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20048000}, 0x8001) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000001c0)) mq_timedreceive(r7, &(0x7f0000000100)=""/59, 0x3b, 0x6, &(0x7f0000000180)={r13, r14+30000000}) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x3def42526d2fedcd, 0x0) setsockopt$rose(r15, 0x104, 0x5, &(0x7f0000000b80)=0x7, 0x4) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000003c0)=0xd) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r17, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r17, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32=r2, @ANYRESOCT=r4, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r17, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r16, @ANYRES32]]], 0x7, 0x1) ioctl$VT_DISALLOCATE(r16, 0x5608) 07:14:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800003fb688f406764810bad6e59a7700240007", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000004f0000000000"], 0x58}}, 0x0) mq_open(&(0x7f0000000380)='//self\x00', 0x40, 0x100, &(0x7f0000000540)={0x20, 0x9, 0xffffffffffffff60, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00ef0600"/20, @ANYRES32=r3, @ANYBLOB="f7ffffff000000000310df2908000100523332000c000280150098280200e200"], 0x3}}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000009e80)={0x0, 0x0, &(0x7f0000009e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000fdff01000000080003006368589f92bf751ef8cb6b38b4017df7ab49e0d473665936916a3c479995fe941ac37585cd24ac0c1f17b20520ab7a51f3c04cdd2c53b1f055e7cb200a7e917cbf98cc1a2e425ec2187b63f809fd19c9d6288d9844ee2d8d7680afa2f1bedcaf1268a7affe4d56c9dc61fc428214d7e2ec71", @ANYRES32=0x0, @ANYBLOB="94b92637f96a62ade79961b68cc75777c7ab2e1c1daed3fa1a9746e581ed0debda8d5aea083d6be74a3394868964c03fb9cdb14510d03e38bb65629815cc7259ab88218a4235abead8b6e05da1df3fa029df1bf0a983c199958262e29d13e1b70332a11fae12c5bdd12b857f8840a3e8b21e8ef1c24542b4c83b4824d616a95fccf6db2f32673443c17c748c5f65f0a9c373c42e948d7bad8e87cc7733cae31f103a8ebe64d199cc3bc678b5d4c1ca3bcc2fa54a58e504fd8dd6d87877134ac11c0ba19dc7283b3618b7237f2852518f63a360cfe935bed76af2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6fb89d66}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x240550b5}, 0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0x58) r7 = socket(0x10, 0x80002, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000004c0)) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) statx(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0xfff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = getpid() r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r14, 0x0) sendmmsg$unix(r11, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r14}}}], 0x20}], 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r9}, {0x2, 0x6, r10}], {0x4, 0x5}, [{0x8, 0x1, r14}], {}, {0x20, 0x2}}, 0x3c, 0x2) [ 396.863267] IPv6: Can't replace route, no match found 07:14:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0xf}) 07:14:11 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x6, 0x6, 0x3, 0x3ead}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000400)={0x1, @raw_data="207132250805b01982320bdb4b27c5fea2020c238e4ae463ae8e927771d90fc9e3cdc2bc4e5d26caeb7f68e93b77cd1411535ae97075135d4127f6475ae51dae206d28d673bedc242beb7292cc7c166207ca4c0d3a765d03ba5e1252c367cd0e13ad5e872284c6135a35e6ecebdad21a57cb8856974d77f1959eb558fe3b046fa15725c7a79f290ad76c16b35b2d6f532042ad5b7d118a026f63a6a092dd505975bbe1149f1376faa6c524c5598b95065069e84b99af0159cdd93825e72ed8d0f29aba538ab3a3a0"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x8000, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r6) write(r6, &(0x7f0000000500)="ac00d77cc2ad2eac7701780c810dffb62abef56a4adc1eeb91bef296e81497177c64a0a37a5087b42f73a0900ffc08e89fc258721f43ee35b854cf10939079de3226198d97ce99c8b11681ea326174d4dff088fe44a9bbf09ec8fd22951a241286a97629637e09b2efe6a3f63258986504bf86ceca149e301a636395ce33620bb17cb504f97e88c75c2926e900c83956cee30b230fa70645830c3d5171eef4bedeb8779ac27f513d2f0967053941d1faa7977434", 0xb4) r7 = dup(0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r7, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xc) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r2], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r7, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYRESDEC]], 0x7, 0x1) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x19, 0x480, 0x3, 0x56d6, 0xc76, 0x8}) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000000)=""/29) 07:14:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15400, 0x0) 07:14:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) 07:14:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0xf}) [ 397.224919] IPv6: Can't replace route, no match found 07:14:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15500, 0x0) 07:14:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0xf}) [ 397.718464] IPv6: Can't replace route, no match found 07:14:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 397.750233] audit: type=1326 audit(1579763652.336:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 [ 397.886795] audit: type=1326 audit(1579763652.386:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x459811 code=0x50000 07:14:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0xf}) 07:14:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15600, 0x0) 07:14:12 executing program 1: r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x1064, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_EXP={0x8, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x4}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x42ca}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x1064}, 0x1, 0x0, 0x0, 0x40840}, 0x2404c) r7 = dup(0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r7, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) write$P9_RSYMLINK(r7, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x2, 0x0, 0x6}}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ppoll(&(0x7f0000000000)=[{r1, 0x9e}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@empty, 0x4e23, 0x3e18, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x62, 0x0, r9}, {0x972c, 0x1, 0x4, 0x9, 0xb0e8, 0x3f, 0x40, 0xffff}, {0x200, 0x0, 0x10000, 0x1d}, 0x5, 0x6e6bb1, 0x0, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x3c}, 0x2, @in6=@local, 0x3507, 0x1, 0x2, 0x4, 0x7, 0x3ff, 0x6f0}}, 0xe8) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 398.039901] IPv6: Can't replace route, no match found [ 398.057399] audit: type=1326 audit(1579763652.386:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 [ 398.075114] selinux_nlmsg_perm: 221 callbacks suppressed 07:14:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0xf}) [ 398.075136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 07:14:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 398.157197] audit: type=1326 audit(1579763652.386:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x459811 code=0x50000 [ 398.231910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.258063] audit: type=1326 audit(1579763652.386:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 [ 398.278970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.302121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.341973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.371628] audit: type=1326 audit(1579763652.396:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x459811 code=0x50000 [ 398.401950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.433165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.458079] audit: type=1326 audit(1579763652.396:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 [ 398.485174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.498272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.511352] audit: type=1326 audit(1579763652.396:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x459811 code=0x50000 [ 398.537461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16487 comm=syz-executor.0 [ 398.538708] audit: type=1326 audit(1579763652.406:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 [ 398.574686] audit: type=1326 audit(1579763652.416:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=16457 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x50000 07:14:14 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x3bb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:14:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:14 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x3, 0x2, 0x100, 0x10}}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) 07:14:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0xf}) 07:14:14 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="e661b44e", @ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf250200000008000500e00000021400020000000000000000000000ffffac1414370800040000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}]}, 0x54}}, 0x4004090) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x1e, 0x4) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) write(r5, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r5], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000340)="eda25c4b589511f90839a18944bed5b373e72a150cfd0874f1fa45a9e4f19f356dca266f6a6bfa9c87acb821281c2ac1ab7f4c09e1c546fcf780b98d651df4b0fde421e34a679e83e3b2d1bc22b7b4ca75227ce69c496a57adb2332b397ccdef585a284dee226409957ac073b7c89b255b80b297aed49b022db691ad02294994dd0136f0eebcba7dd24acb0ce10ce6b76ce0860ee176625d033d12e6eee087acf899f9dd2e5dd0", &(0x7f0000000400)="a0f0591d2f83b83e16084077634471975841a350023c2235dcd87a9143843df1474b90df74914df249c2a0a8543ab0cb5e0ea2304c79fc253f0f7fc6d105d5732e42e7724cb0b38903614936c9f9f438ab5a67513bfdc62b", 0x2}, 0x20) 07:14:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15800, 0x0) 07:14:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0xf}) [ 400.330613] IPv6: Can't replace route, no match found 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0xf}) 07:14:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15801, 0x0) 07:14:15 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x4bfb, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x4bfb, &(0x7f0000000000)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x4bfb, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYPTR64, @ANYBLOB="5529fa8d276ad6bc88cf4776687059c168cef40295cbb69f482e863ef26831196b1a3b34c9d358268592f60c401cb2452a4b38fa354b8e7b8419463fc1153521af208996612582f055855a86c362ab5fcfde566a2320b529e6e14fe4b4fd5787d64149b974075839be06744483bfe4564bd2"]]], 0x101c) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket(0xa, 0x3, 0x8) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRES32]]], 0x7, 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x104, 0x32, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x70}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2809}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000084}, 0xd0) 07:14:15 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}) 07:14:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0xf}) [ 400.728190] IPv6: Can't replace route, no match found 07:14:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCOUTQ(r1, 0x5411, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000)=0x4, 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='clear_refs\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r4) r5 = dup2(0xffffffffffffffff, r4) recvmmsg(r5, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@pptp, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}, 0x4}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/237, 0xed}], 0x2, &(0x7f00000014c0)=""/252, 0xfc}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f00000015c0)=""/153, 0x99}, {&(0x7f0000001680)=""/231, 0xe7}], 0x3}, 0xffff76e8}], 0x3, 0x2020, &(0x7f0000001880)) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x2, 0x4, 0xa6, 0x10}}) 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15865, 0x0) 07:14:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0xf}) 07:14:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e79bad40ac3794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea00000000000000000000000000000000000005000000000000dfff0000000000000000000000ee010000000100000000402000"], 0xb8}}, 0x0) lstat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0xa) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560047031dfffd946f610500070000000000000006000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x8, 0x1, 0x100, 0x2}}) [ 401.011868] IPv6: Can't replace route, no match found 07:14:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0xf}) 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0xf, 0x70, 0x1, 0x3f, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x9}, 0x2, 0x1, 0x3, 0x8, 0x2, 0x1, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15900, 0x0) 07:14:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0xf}) 07:14:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 401.408749] IPv6: Can't replace route, no match found 07:14:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0xf}) 07:14:16 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 07:14:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x30, 0xe, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048801}, 0x44850) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r4}, &(0x7f00000000c0)=0x8) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x10000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x3d}, &(0x7f00000000c0)=0x90) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0xf, r5, 0xfffffffffffffffb) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d16d884eaadaf0f91088fd07f44ad28056d0509bd94e84701fa90bd67b039b467e7c766cd1c6542a8608aa", 0x2b, r5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0x2, 0x7ff, 0x8, 0xe2, 0x5}, 0x14) 07:14:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15a00, 0x0) 07:14:16 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d2e246d6408d7756d74727573c8e97ae5b67465642526707070312827d4d52f62760942"], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x101, 0x4) 07:14:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0xf}) 07:14:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0xf}) [ 401.949957] IPv6: Can't replace route, no match found 07:14:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x121000, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/4096) 07:14:16 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) r5 = open(0x0, 0x0, 0x0) fsetxattr(r5, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15c00, 0x0) 07:14:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0xf}) 07:14:16 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 07:14:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) dup3(r1, r0, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000040)) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 402.227700] IPv6: Can't replace route, no match found 07:14:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0xf}) 07:14:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x20, 0x41) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x15e00, 0x0) 07:14:16 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x2) sched_getparam(r0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r3 = getpgid(0x0) sched_setaffinity(r3, 0x31f, &(0x7f0000000500)=0xa000000000000005) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000640)) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') r6 = socket$inet6(0xa, 0x2, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x100001) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x400c1) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000300)) 07:14:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000000)={0x2, 0x4c73, [0x4, 0x7, 0x5, 0x351e, 0x2], 0x3}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0xf}) [ 402.499542] IPv6: Can't replace route, no match found 07:14:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x27, 0x3, 0x0) bind$tipc(r1, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x8000}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/218, 0xda) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0xf}) 07:14:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x16000, 0x0) 07:14:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x0) 07:14:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5488, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8001, 0x20000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x204, 0x3, 0x1, 0x100}}) 07:14:17 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x50, &(0x7f0000000140)='b\x83*Q\x8e\xbcb\x83\x15v\xac\xe1\xd11\x85M\xb9\xe3l\xdbN\x04\a\n+\xa22\xa9\xaf\xb6j{v\xb7\xee~9?H\xbf\x14\xa3\xce\xac\x12e\xdd\xdblW\fIM\xf2`\x16{\'k\xcd\x01\xb0\xe2\x80\xa2\x0f\xde\x1bb\\\xa4Q\x9b\x81\x06\xa2\xdeP\x0e\xb3'}, 0x30) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/114) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x1f, 0x4) [ 402.774355] IPv6: Can't replace route, no match found 07:14:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0xf}) 07:14:17 executing program 2: 07:14:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x16400, 0x0) 07:14:17 executing program 2: 07:14:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r2], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r3, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x4000, 0xa, 0xfc, 0x1}}) 07:14:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x7fff}]}) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x4, 0x9, 0x0, 0x401, 0x9, 0x6, 0x6}, 0x1c) 07:14:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0xf}) [ 403.101481] IPv6: Can't replace route, no match found [ 403.128560] selinux_nlmsg_perm: 127 callbacks suppressed [ 403.128577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:17 executing program 2: [ 403.188657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 403.237382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0xf}) 07:14:17 executing program 2: [ 403.309245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 [ 403.347180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) syz_open_dev$tty20(0xc, 0x4, 0x1) 07:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 403.417593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 [ 403.452047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 [ 403.522842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x16500, 0x0) 07:14:18 executing program 2: 07:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0xf}) 07:14:18 executing program 4: rt_sigpending(&(0x7f0000000000), 0x8) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200480, 0x0) recvfrom$rose(r1, &(0x7f0000000140)=""/227, 0xe3, 0x2002, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x4, 0x4) r3 = open(0x0, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) accept4$inet(r3, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000300)={0xfffffff8, 0x2, 0x7cf370df, 0x3ff, &(0x7f0000000280)=[{}, {}]}) [ 403.603784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 [ 403.641005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16736 comm=syz-executor.0 07:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) bind$netrom(r1, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x17, 0x4) 07:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:18 executing program 2: pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r0, 0x0, 0x0) [ 403.773551] IPv6: Can't replace route, no match found 07:14:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='3ystem.$md5sumtrusted%&ppp1(\'\x00'], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0xf}) 07:14:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x16558, 0x0) 07:14:18 executing program 1: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 07:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:18 executing program 2: 07:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0xf}) 07:14:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x3f, 0xfffffffffffffd09) [ 404.065858] IPv6: Can't replace route, no match found 07:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0xf}) 07:14:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:18 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x84280, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200087ea, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x196, 0x30, 0x3, 0xff}, &(0x7f0000000080)=0x18) fcntl$addseals(r0, 0x409, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="3f0000003eaac976cb0760cb28777ba79dd02f6ba001c339be645edd1113af63578ec38d510e04000000000000005c9a2ba16c3c69c98f23930cdb1af4abe18112bf3f2f46cdf99e6c7668caefc136af8390"], &(0x7f0000000140)=0x47) r3 = dup(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x4c, &(0x7f00000004c0)='0pp1\x00q\x88_\xb2\x94\x8c\x02 tB\xb0\xd8x`\xfb\xd4\xe1K9*\x90\xe6Q\x1b\xc0\x91Z\xd9\xff\xc6:\x04\x05T\xa0\xc1q\x87\xd3\x03+$s\xcbJAk\x18\x15(\xdd\xc11\xce4(\xf7\x9f.%2\xee\x0e\xf0\x93\xad-M|\x9c\xff'}, 0x30) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000440)='/\x00', 0x2) r4 = dup(0xffffffffffffffff) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x802, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)={r7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000340)={r7, 0x4, 0x1, 0x6}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000003c0)={0x101, 0x5, 0x9, 0x5, 0x9, 0x8, 0xfff, 0xfffffff8, r8}, &(0x7f0000000400)=0x20) setsockopt$packet_int(r4, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000202050000000000000000000700000108000800000000010800000000000006000700000200"/52], 0x34}, 0x1, 0x0, 0x0, 0xc0c1}, 0x40000) r9 = open(0x0, 0x0, 0x0) fsetxattr(r9, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000480)={r8, 0x8}, 0x8) 07:14:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:18 executing program 2: 07:14:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x16600, 0x0) 07:14:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0xf}) 07:14:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x482080, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a29}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x5) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRES32=r4], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r6, @ANYRES32]]], 0x7, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x0, 0x1, 0x2000}) 07:14:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x220040, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4c240, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000040)=0x7fff, 0x4) write$nbd(0xffffffffffffffff, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x3, 0x4, "dbeb4e49821bca71dc9d5f68980bb3557c08a5e8b7d2f3b109867d5cfd64f6b8eb06e111fc1fce1997ac55fbad0d45a5323d8840e1df77b57c83e97271c9f5af164c9769a73b4db24818b9d002ef7546b007a092fbdb150577425a904694be41eed6f0c2f3cb3281896104133f221e09275334584fd3475c679c664b0061ca4b685467ad86123053f8ab1dbdacfd4b432e790d83c5e7c14c7f9402ea8217761095f3418538b26d5ff874d9eb0fd2b372fdc6fa9f9c14092821ef7665b3183c731f10a1dd56d97d48121456e6702bc7c22f580f50f0d6472228f3e077c7"}, 0xed) 07:14:18 executing program 2: [ 404.332958] IPv6: Can't replace route, no match found 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0xf}) 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x17401, 0x0) 07:14:19 executing program 2: 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0xf}) [ 404.622690] IPv6: Can't replace route, no match found 07:14:19 executing program 2: 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0xf}) 07:14:19 executing program 4: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100)=0x1ff, 0x4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e40000000408050000000000000000000a00000805000300110000003400048008000240000000020800014000000006080001400000010008000140000000070800024000000001080001400000ff8c1c5390000480080003400000003f080002400000000508000140000002000900010073797a310000000006000240001000002c000480080004400000000508000140000000080800044000000200080007400000ffff08000940000000000c000480080001400000096d06000240813700002400048008000a400000000708000540000000b308170140000007ff08000540fbfffff7"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c004) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x180fe, 0x0) 07:14:19 executing program 2: 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100, 0x1}}) 07:14:19 executing program 2: 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0xf}) [ 404.958877] IPv6: Can't replace route, no match found 07:14:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x8) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:19 executing program 2: 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x18100, 0x0) 07:14:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="fa3e889f0482d8ac574d7c694c31ac354f74ab47436a4331b1c1a2ea02b0c13f5b484af5a5b0bf9e26c66a922c40f5e3c22d0adb54bfed7bbf3a5bc49a28b0ca456b112bda43c2b9a7de1e31622fa51af591ec7145656bce5aaf5c08d38a87a96918df7b9801bc15ef3eb4c521b0b0f8a8ba93ac9419ffc5ad0dfab2af70399a4e2f97b844f5ae054c015ba31c424e0c76be42e3b9c027b09d1787f4c8e9aad0ea8937202151bc2605ab8d660eb339a8146fb94dd25537575d2384c0a11a204d77d176e89bdb19ee21922073c42404793454aee1bbf3271b12a91a29f29cb9de176579d60e5781e653f4a985972ea1439c", 0xf1, 0x10001}, {&(0x7f00000001c0)="42ef66671c8c0e326bdc9e10dbb17300297e3f6e904d205749dc17b6592c56fe2c35c687a61e8d863915c2ed30a3df4b48d400a0ceff15f4b4ca20873af38fb2c8bc8dc1d5dc8fce39a380e61b453fbc0d8672c0", 0x54}, {&(0x7f0000000240), 0x0, 0x3}, {&(0x7f0000000280)="34cc9a0968095fc0dc46b4cf23544830ec32ab9c6c675db057dbb0cab027e613d0f1006b4e4c4a1eb276c7d3b92adb4cad32f8a40fefe9968638efca59e45327aea9efb848b3065c57e2bc9b1e4da11537", 0x51, 0x2}], 0x2000000, &(0x7f0000000380)={[{@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}, {@uni_xlate='uni_xlate=1'}], [{@audit='audit'}, {@hash='hash'}, {@dont_appraise='dont_appraise'}]}) 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0xf}) 07:14:19 executing program 2: [ 405.249665] IPv6: Can't replace route, no match found 07:14:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0xf}) 07:14:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$cont(0x1f, r1, 0x8, 0x8) r2 = fcntl$getown(r0, 0x9) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x101, 0x1, 0x4}, &(0x7f00000000c0)=[{}, {}, {}, {}]) [ 405.354115] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value 07:14:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1c0fe, 0x0) 07:14:20 executing program 2: 07:14:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0xf}) 07:14:20 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000000c0), 0x10) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @local, 0x1}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3f, 0x0, 0x4, 0xfd}}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) 07:14:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x1f, 0x4) [ 405.507732] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 405.542856] IPv6: Can't replace route, no match found 07:14:20 executing program 2: 07:14:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1e000, 0x0) 07:14:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:20 executing program 1: r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x8, 0x0, 0x0, 0x100}}) 07:14:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0xf}) 07:14:20 executing program 2: 07:14:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 405.830457] IPv6: Can't replace route, no match found 07:14:20 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000440)=""/31) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xd8, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="39e563ff60d9ad37edc38c320f35f1bc743a16ba88c230458b88706282c21bd6a109167007ed725350050a2898b808e8f1c89e24c197cc6a95a7b2c2a66ce047d853b13b33", 0x45, 0x8000}, {&(0x7f0000000140)="edc99d4580445ae5ee06ba859694f2eb519b25fd3a118ff30f49d830da27b9cbcfa66906cf1b12ab2220b1bd07ae55a88a9ed6ad1124db5daba985ecb0813e058778117e4ee0ae72ffc488890b4f02f43499bde8fa80", 0x56, 0x6}, {&(0x7f00000001c0)="56537a675633c879f064ea56643661dba4c32e2b3ae8df24dd91", 0x1a, 0x8}, {&(0x7f0000000200)="e92ab8e1476db63e6b13da459e26296828dbbe3f21a8d711918cd22d775d740d02d1130f495d7a1a7ca80a386d257a726b4884b8e493fb9f7756a4f99be33ef20c18da9efcb2bc1d220a2008c9de2b87ccf86472cd8bb56390c956b0551e2ac35b5675d599660822350e1f475cf907bd9937b96c33b20948bbdf4f41144a6b6643db7b4f737dfc8ace30b28787d7a7666d3859e9f8837d7ad077d4d50abcc2cc44d37792b4dd827d1133689670e965b05943e3e8cb0d9c14ca904cab742cd191700f439ac172731c299795e8c1e996dbf25a15cf71c552209befe9fac8dc99a7f2ba2996b97d749d75144e1a3489698847df", 0xf2, 0x4000000000000000}], 0x8, &(0x7f0000000380)={[{@nodecompose='nodecompose'}], [{@measure='measure'}, {@subj_role={'subj_role', 0x3d, '\\'}}]}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x0) fsync(r1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x9f, 0x4) 07:14:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) r3 = dup2(r1, r2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x9, 0x0, 0x0, 0x2, 0x7}, 0x14) 07:14:20 executing program 2: 07:14:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0xf}) 07:14:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1f000, 0x0) [ 406.015954] hfsplus: unable to parse mount options 07:14:20 executing program 2: [ 406.099743] hfsplus: unable to parse mount options 07:14:20 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x6558, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x1, 0x4) [ 406.138136] IPv6: Can't replace route, no match found 07:14:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0xf}) 07:14:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x11, 0xa, 0xe5, &(0x7f0000000080)="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"}) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="03fb1d253c4f0466b547db6a642b2a14c659a98568c5be8787590d15031639b9addb9b1ae399747d5029a1370e53dc83b7175687f7120c6aab7526128e5d501aace3ede66c35a51c09fa7aaf48fa", @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000480)={0x7ff, 0x1, 0x8}) 07:14:20 executing program 2: 07:14:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1fc00, 0x0) 07:14:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x406001, 0x0) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d2e246d643573756d74727573746564252670707031282701"], &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0xe) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e21, 0xdfa, @remote}}, [0xfff, 0x6, 0x2, 0x80000001, 0x80000001, 0x10001, 0xfffffffffffffffe, 0x4, 0x5, 0x5, 0x2108, 0x5, 0x3, 0x9, 0x3]}, &(0x7f0000000240)=0x100) r7 = open(0x0, 0x0, 0x0) fsetxattr(r7, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r6, 0xb9, "86e8f24c155dd80b94f13975bef5177724d212646b66173177d5a9fc633bda977428e5704604c7ddaf0b6e027508ef5a7d9a22adc7b775dd56795d4ce906af767fba226558f53dc2543d2632a9ce23db81db5e9874e4234b15b1b147a0ba577dc9d59c0eb93834d9c8fd483dc85c7e4295772546e254c380e73ae965cd87cc87bb0984422e370434a3de8eae53a60d1aa3e40abcd6eb36b1a85fb9da467fffdc713849679010143d3d9ce2dba119c9aee99a386347420255a2"}, &(0x7f0000000380)=0xc1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0xfffffffa, 0x2, {0x9e8ffd6d63bcfd0, 0x2, 0x2, 0x1, 0xffff}, 0xd4}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x44000, 0x0) 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0xf}) [ 406.486669] IPv6: Can't replace route, no match found 07:14:21 executing program 2: 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1fe80, 0x0) 07:14:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0xf}) 07:14:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x2, 0x100, 0x0, 0x3, 0x5, 0x0, 0xdd34, 0x8, 0x0, 0x3, 0x2f4, 0x4, 0x9, 0x6, 0x9, 0x0, {0xfffffff8}, 0x4, 0x1}}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) connect$netrom(r2, &(0x7f0000000180)={{0x3, @null, 0x7}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000000)={0x7, 'team_slave_0\x00', {0x8}, 0x6e1}) 07:14:21 executing program 2: [ 406.758210] IPv6: Can't replace route, no match found 07:14:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3, 0xf8, 0x100, 0x10}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) r2 = dup2(r1, r0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/202, 0xca}) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x92d12000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0xf}) 07:14:21 executing program 2: 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1fec0, 0x0) 07:14:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xfffb, 0x81, 0x2, 0x0, 0x1000, 0x6, 0xb, 0x7ffffffd, r2}, &(0x7f0000000040)=0x20) 07:14:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0xe}}) 07:14:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0xf}) 07:14:21 executing program 2: 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x16982) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x9, 0xa, 0x6, 0x3, 0x2}}) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000200)={0x0, 0x6}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 407.166257] IPv6: Can't replace route, no match found 07:14:21 executing program 1: r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r3, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4020108}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0xa, 0x6}, {0x9, 0xfff1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r4, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r4, 0x5}, &(0x7f0000000080)=0x8) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0xcc0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000bc0)='/dev/vcs#\x00', 0x1, 0x400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000c00)={{0x2, 0x80}, 'port1\x00', 0xa0, 0x20800, 0x80, 0x8a, 0x0, 0x7f, 0x80000000, 0x0, 0x1, 0x9}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:21 executing program 2: 07:14:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000040)={0xf}) 07:14:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x1ff00, 0x0) 07:14:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 2: [ 407.395421] IPv6: Can't replace route, no match found 07:14:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000040)={0xf}) 07:14:22 executing program 2: 07:14:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x40000, 0x0) 07:14:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 407.684500] IPv6: Can't replace route, no match found 07:14:22 executing program 2: 07:14:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 07:14:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0xf}) 07:14:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x4000000, 0x0) 07:14:22 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) getsockname$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x1f) 07:14:22 executing program 2: 07:14:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 407.896640] IPv6: Can't replace route, no match found 07:14:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80800, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x3) 07:14:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0xf}) 07:14:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x13, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x9, 0x101, 0x9, 0x34e, 0x5, "dbc517c4bd706735"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x5000000, 0x0) 07:14:22 executing program 2: 07:14:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0xf}) 07:14:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@loopback, @local, @broadcast, @local, @multicast1]}, 0x24) [ 408.198005] IPv6: Can't replace route, no match found 07:14:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x143cc3) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:22 executing program 2: 07:14:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x9f000000, 0x0) 07:14:23 executing program 2: 07:14:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = dup(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x30}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32df}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe01}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @sack_perm], 0x3) [ 408.234685] selinux_nlmsg_perm: 230 callbacks suppressed [ 408.234700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.234924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 07:14:23 executing program 2: [ 408.235135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.235339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.237936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.240927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 07:14:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)="555c2ca851b5a493a526c358a26c947d8f8ddd2b4488e0e020471859d16b5f06ca43c47054c9206151824289e05ce20c29bf644b3debac4d34f34a79e0695384dcaf56b516e54d262593979914bea37a8a177d023537cfbd856f0c734731e9ee346e6df6060f8102f8a724cb4a7508375aae545130a8c03eef96e3e41a35154b4871bdada346ae37b7d05a1b18ca2c6e70ff7b3e3b1bf752753716526cda0c5b223741c313873ae232e9c7df12cf64955db07040f74cad3622f513", 0xbb, 0x20004090, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) 07:14:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa0000000, 0x0) [ 408.241150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 07:14:23 executing program 2: [ 408.241361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.250686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.251014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17196 comm=syz-executor.0 [ 408.468755] IPv6: Can't replace route, no match found [ 408.656992] IPv6: Can't replace route, no match found 07:14:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20040081) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa1000000, 0x0) 07:14:23 executing program 2: 07:14:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000040)={0xf}) 07:14:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 07:14:23 executing program 2: 07:14:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000080), 0x4000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 408.886644] IPv6: Can't replace route, no match found 07:14:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) kexec_load(0xffffffffffffff7f, 0x0, &(0x7f0000000000), 0x1) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000040)={0xf}) 07:14:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa2000000, 0x0) 07:14:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:23 executing program 2: 07:14:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x1, 0x0, 0x103, 0x2}}) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x9f0000, 0x401, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a67, 0x7, [], @string=&(0x7f00000000c0)=0x77}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0xc10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x4c845) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x2000, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)={r4}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) write(r7, &(0x7f0000000040)="e0", 0xfffffe00) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xa5, 0x50, 0x81, 0x80, 0x0, 0x2, 0x80001, 0x1a, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3f, 0x3}, 0x2801, 0xdeba, 0xff8000, 0x5, 0x81, 0x8, 0x526}, r10, 0x10, r2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYRES32=r7], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRES32]]], 0x7, 0x1) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000000)=""/57) 07:14:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0xf}) [ 409.110484] IPv6: Can't replace route, no match found 07:14:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x5, 0xffffffffffffff1b) 07:14:23 executing program 2: 07:14:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:23 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x8, 0x4) 07:14:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa3000000, 0x0) 07:14:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0xf}) 07:14:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x9, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:24 executing program 2: [ 409.449016] IPv6: Can't replace route, no match found 07:14:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0xf}) 07:14:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa4000000, 0x0) 07:14:24 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x102}}) 07:14:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:24 executing program 2: 07:14:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0xf}) [ 409.696538] IPv6: Can't replace route, no match found 07:14:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000cf7000000000000095000000000000007c41776586b2841fb71916411c22f945fb70fc5b4e982e61d68b61c1ba6e53657b8dc7c5bb72000100001bc6470051a39eab7f86e711b7bc5e5c45d8cfc8c575b46ecea5a34655b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6c51cc11505e90fbda60000000000e9c303f25e537231"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) write(r8, &(0x7f0000000040)="e0", 0xfffffe00) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r10) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000200)=0xff, 0x4) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r11, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r11, @ANYRES32=r8], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r9, @ANYRES32]]], 0x7, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x4cb93b0c, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9a090a, 0x64, [], @ptr=0x3f}}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x77d}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2c}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r1, 0xc) 07:14:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa5000000, 0x0) 07:14:24 executing program 2: 07:14:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 07:14:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00\x00\x001\x00\x00\x00'], 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f0000001400)={0x14, r3, 0x102, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x24044054) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xf9f0000, 0x68eb0ef8, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9c0909, 0x7fffffff, [], @p_u32=&(0x7f00000000c0)=0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r6, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000010}, 0x40000) 07:14:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 410.015057] IPv6: Can't replace route, no match found 07:14:24 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) 07:14:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa6000000, 0x0) [ 410.077526] kauditd_printk_skb: 7298 callbacks suppressed [ 410.077541] audit: type=1800 audit(1579763664.666:7424): pid=17341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=32769 res=0 07:14:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3}) 07:14:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) [ 410.216136] audit: type=1800 audit(1579763664.786:7425): pid=17354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17363 res=0 07:14:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) [ 410.286963] IPv6: Can't replace route, no match found 07:14:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) prctl$PR_SET_ENDIAN(0x14, 0x0) 07:14:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4}) [ 410.379802] audit: type=1800 audit(1579763664.796:7426): pid=17356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=65538 res=0 07:14:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xffff, 0x0, 0xfffc, 0x3}}) 07:14:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa7000000, 0x0) 07:14:25 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)) 07:14:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1000000) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x26, 0x4) [ 410.560788] IPv6: Can't replace route, no match found 07:14:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x959, 0x80000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000080)={"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"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5}) 07:14:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa8000000, 0x0) 07:14:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f66696c65300ad1266d12e95afed85a1bf38a2f1b4ba88686b1d7eefe93e8a0dc000000000000000000"], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66697371cb6939730200696e75787d6c3177ee76440ad2dedc6f5c20026465762f61646900000000000000"], 0x30) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65300ab8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"], 0x2a) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "78f5515a7c708d05446c211efb288b6388f1aad20378c63e03289b82514635002508f9"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c65300ab74ad88b46abd07b533304f2ab780c44c96504b78bf0aa77ca59a86aaf496f"], 0x2a) 07:14:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6}) 07:14:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 410.781912] IPv6: Can't replace route, no match found 07:14:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) write(r3, &(0x7f0000000040)="e0", 0xfffffe00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES32=r3], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3904000000000000000009000000300003000800010002000000080003000000000014000200636169663000000000000000000000000300040001000000"], 0x44}, 0x1, 0x4c00}, 0x0) 07:14:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xa9000000, 0x0) 07:14:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7}) [ 411.045813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.055203] IPv6: Can't replace route, no match found 07:14:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa}) 07:14:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x63, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x3, 0x8}) 07:14:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xaa000000, 0x0) [ 411.145416] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 0, id = 0 [ 411.182524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:14:25 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) 07:14:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb}) 07:14:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x88, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x4, 0x1000, 0x1, 0x2, 0x1ff, 0xdf, 0x1, 0x7, 0x3, 0x9, 0xffffffff, 0x9, 0x1000, 0x5f119d44, 0x2c, 0xd, {0xfffffffb, 0x2}, 0x1, 0x6}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/75, 0x4b) [ 411.276815] IPv6: Can't replace route, no match found 07:14:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 07:14:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xab000000, 0x0) 07:14:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x3, 0x0, 0x0, 0x0, 0x100}}) 07:14:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) splice(r1, &(0x7f0000000040)=0x400, r0, &(0x7f0000000100)=0x200, 0x10001, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) r2 = open(0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7379738d656d2e246d6435736a6d74727573746564252670707031282700"], &(0x7f00000000c0)='ro\x00', 0x3, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x28, 0x0, 0x100}}) 07:14:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc}) [ 411.479492] IPv6: Can't replace route, no match found 07:14:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = socket(0x1f, 0x80000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0xfc3, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x3, 0x80000001, r0, 0x0, &(0x7f0000000100)={0x9b0953, 0x80000001, [], @ptr}}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x410002, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000300)={0xd38, 0xf9, "1bd6aa5aea1eb0c521164321d4c4ff378b9879f78d583ea76466991e6299e32f38c11332f4dab5c399cb79331a4c772182fb9daabd1025c6026134b824190a4730dfdf0491d012ab53331715bc1cf2b56ca6ff649f37c8e6bddc6a6d602f25e656f38d3aee7e4ac54b1e72cac656fa8363f903de70b058e0ef90f9bbb101ff858fd51c8fbc2c5149fa6fc876f177308c2f939bcce260d7661c23c9f5e1fdb06d12d7a8e969cef21a1bd8ffa1c6f83c85bd61d172c259eb433ef0d2933b2119f9d9eafe21d40100cf0409f4bd2a39b2d30d2e7b21c2cf3ba75764b25f66e4c36a7e5c5134b63daa046cf702b954df16b98ae85950a4af700a69"}) 07:14:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xac000000, 0x0) 07:14:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x88, 0x0, 0x0, 0x0, 0x100}}) 07:14:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4001, 0x0) 07:14:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000300)) getpid() sched_setscheduler(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/55) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) socket(0xa, 0x3, 0x8) gettid() r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000200)="580000001300add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffff", 0x42}, {&(0x7f0000000480)="17945f272ad9868fd68e084bc2955231e05cc7702752", 0x16}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd}) 07:14:26 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1f, 0x4) [ 411.728053] IPv6: Can't replace route, no match found 07:14:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xad000000, 0x0) 07:14:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001680)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000016c0)={@loopback, @loopback, @empty, 0xff, 0x4, 0x4a54, 0x400, 0x7f, 0xc4000100, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe}) 07:14:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x2, 0x0, 0x0, 0x100}}) 07:14:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x440000, 0x0) bind$netrom(r1, &(0x7f0000000200)={{0x3, @null, 0x3}, [@bcast, @default, @default, @null, @null, @bcast, @bcast, @null]}, 0x48) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) io_setup(0x714, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x9, 0x29, 0xe0, 0x9, 0x0, 0x2, 0x80000, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xe4aa}, 0x20, 0xe9, 0x3, 0x9, 0x2, 0x1ff, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) r4 = open(0x0, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x81, r3, &(0x7f0000000040)="d9ac7dc3b1", 0x5, 0x8, 0x0, 0x1, r4}, &(0x7f0000000180)) 07:14:26 executing program 2: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1}]) [ 412.055797] IPv6: Can't replace route, no match found 07:14:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x105000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x3f, r4, 0x0, 0x2, 0x4}}, 0x20) 07:14:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11}) 07:14:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xae000000, 0x0) 07:14:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x3, 0x0, 0x0, 0x100}}) 07:14:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:14:26 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x5}, 0x8) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0xe9ff53660c9d7455, &(0x7f00000018c0)=ANY=[]) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000014c0)}, {&(0x7f0000001580)="0add52139a511cf3c8b3f840fe6c3aa4cbcb6d5ddfd4103a47db037a2a3f823b8107d0c782093e07819094cd8b53bc64a86b49977d6c82fa69dda3f471fae28ba47563031be1e3a1e0e4fb3c39", 0x4d}], 0x2, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) waitid(0x83b895581628fca4, 0x0, &(0x7f0000000400), 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 07:14:26 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2d000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3d90", 0x3}], 0x0, &(0x7f00000005c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 412.365480] IPv6: Can't replace route, no match found 07:14:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) 07:14:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x4, 0x0, 0x0, 0x100}}) 07:14:27 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xaf000000, 0x0) 07:14:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) [ 412.535089] FAT-fs (loop2): bogus number of reserved sectors 07:14:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0xa2, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000002030104000000d0a7a5925800000000000c080800041ee36c4ca3910d5e000000001c08000501000000000802000000000600"/67], 0x48}}, 0x20000000) [ 412.582285] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 412.600826] IPv6: Can't replace route, no match found 07:14:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x5, 0x0, 0x0, 0x100}}) 07:14:27 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xb0000000, 0x0) 07:14:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:14:27 executing program 2: pipe(&(0x7f0000000380)) r0 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x0e\x00\x00\xb2\x1e\x00\x00\x00\x00\x1b\x80\xee\xe6\x8c\x15@\x01\xe3\xd4CG^\xc2v\x00\x00\x00\x00\x00\x00\x00\x00\x00S\x95\x8d', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x8002) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[]}}, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000640)={0x166, @time}) 07:14:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$isdn(0x22, 0x3, 0x10) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) [ 412.760396] IPv6: Can't replace route, no match found 07:14:28 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) 07:14:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0xb1000000, 0x0) 07:14:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x6, 0x0, 0x0, 0x100}}) 07:14:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:14:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'batadv_slave_0\x00'}}, 0x1e) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local, 'ip6_vti0\x00'}}, 0x1e) 07:14:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="69843c40bc832a86cc5f730658af4e5db8c6d406e4323d3aff6472ead2db7df918e9777a617edf1831fcb26a211c30a449dbb0948c0c43b045a0b35af19720cc43a584f5c77098b91dd50bdbef4c0c0d6b0d07f0ac7d1c595bbfc3f3beab0c19a406677276d726c14e", 0x69}], 0x1}}], 0x1, 0x0) [ 413.509016] IPv6: Can't replace route, no match found 07:14:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080), 0x4) 07:14:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x7, 0x0, 0x0, 0x100}}) [ 413.533076] selinux_nlmsg_perm: 275 callbacks suppressed [ 413.533093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 07:14:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) 07:14:28 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x216800, 0x0) 07:14:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) [ 413.657434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 07:14:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf}) r1 = open(0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'system.', '$md5sumtrusted%&ppp1(\'\x00'}, &(0x7f00000000c0)='ro\x00', 0x3, 0x2) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x4, 0x6, 0x9, 0x104}) [ 413.730589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 07:14:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x60, 0x0, 0x0, 0x100}}) [ 413.789340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 413.813822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 413.850760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 413.876717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 413.936247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 413.990095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 [ 414.008098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17608 comm=syz-executor.0 07:14:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x300, 0x0, 0x0, 0x100}}) 07:14:28 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'veth0_to_bridge\x00', {0x2}}) accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80, 0x800) poll(&(0x7f0000000140), 0x0, 0x10001) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x18, 0x4) 07:14:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x1bf) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000040842, 0x0) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/168}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r1, 0x3eaa6000) 07:14:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x84) 07:14:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x2) 07:14:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x500, 0x0, 0x0, 0x100}}) 07:14:28 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 414.211071] audit: type=1400 audit(1579763668.796:7427): avc: denied { map } for pid=17658 comm="syz-executor.1" path="socket:[69899]" dev="sockfs" ino=69899 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 [ 414.247990] IPv6: Can't replace route, no match found 07:14:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x661, 0x0, 0x0, 0x100}}) 07:14:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0x2, 0x600, 0x0, 0x0, 0x100}}) 07:14:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x3) 07:14:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x240240, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x274) 07:14:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x193806) tee(r0, 0xffffffffffffffff, 0xffffffff00000000, 0x7) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0xf}) statx(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0xfff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r4, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r6], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRES32]]], 0x7, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000009e80)={0x0, 0x0, &(0x7f0000009e40)={&(0x7f0000019380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0100000000000000fdff01000000080003006368589f92bf751ef8cb6b38b4017df7ab49e0d473665936916a3c479995fe941ac37585cd24ac0c1f17b20520ab7a51f3c04cdd2c53b1f055e7cb200a7e917cbf98cc1a2e425ec2187b63f809fd19c9d6288d9844ee2d8d7680afa2f1bedcaf1268a7affe4d56c9dc61fc428214d7e2ec71", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r13 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r13, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0xfef0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000003c0)=0xd) write(r15, &(0x7f0000000040)="e0", 0xfffffe00) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000003c0)=0xd) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/enforce\x00', 0x200000, 0x0) r18 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r18, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r19, &(0x7f0000000140)=ANY=[], 0xfef0) r20 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r20, 0x5423, &(0x7f00000003c0)=0xd) write(r20, &(0x7f0000000040)="e0", 0xfffffe00) r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r21, 0x5423, &(0x7f00000003c0)=0xd) r22 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r22, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r22, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r18, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r22, @ANYRES32=r20], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r19, @ANYRESOCT=r21, @ANYRES32]]], 0x7, 0x1) ioctl$TIOCSETD(r22, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r17, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=r13, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r17, @ANYRES32=r15], @ANYPTR64, @ANYRES32, @ANYRES32, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r14, @ANYRESOCT=r16, @ANYRES32]]], 0x7, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='fuse\x00', 0x13010, &(0x7f0000000cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r24, @ANYBLOB=',default_permissions,max_read=0xfffffffffffff9_read=0x0000000000000400,hash,obj_role=/dev/ptmx\x00,smackfsrsot=,nodev!:ppp0trustedmd5sum-,fsu\x00id=4ca1ab7c-e65e-c\x0018-bd17-\x005f87505,func=FILE_MAP,\x00\x00\x00\x00\x00\x00\x00\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r12, @ANYBLOB="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"], 0x3}}, 0x0) r25 = dup(0xffffffffffffffff) setsockopt$packet_int(r25, 0x107, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r25, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r26, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r26) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r27) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r28, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r28) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r29, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r29) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r30, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r30) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r31, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r31) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r32, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r32) r33 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r33, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xf}, 0xd8) close(r33) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x44004030}, 0x9, &(0x7f0000000240)={&(0x7f0000001400)=ANY=[@ANYPTR=&(0x7f00000012c0)=ANY=[], @ANYPTR=&(0x7f0000001440)=ANY=[@ANYRESDEC=r30, @ANYRESOCT, @ANYRESOCT=r31, @ANYRESHEX=r23, @ANYRESDEC=r32, @ANYRESDEC=r33], @ANYRES16=r29, @ANYRESOCT=0x0]}, 0x1, 0x0, 0x0, 0x4001}, 0x0) [ 414.498145] IPv6: Can't replace route, no match found 07:14:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="05") 07:14:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x4) 07:14:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x547ea000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x13) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}}) 07:14:29 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1f, 0x4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xd) write(r6, &(0x7f0000000040)="e0", 0xfffffe00) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0xd) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000040842, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0xd) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0103000000000000f06c766172c2ea261f6735657cc508517c54ada766d815ff62fdb341", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000280)=ANY=[]], 0x7, 0x1) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000140)={0x0, 0xfffffffa, 0x3, &(0x7f0000000100)=0x6f8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000180)={0x4, "f96a02834537d0f56bddff45c5e75ac0b7f900b13af70bc74cc0d73c1b16da20", 0x1000, 0x10000, 0x8000, 0x8, 0x5}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r9, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, &(0x7f00000000c0)=0x8) [ 415.095062] IPv6: Can't replace route, no match found [ 415.134002] ================================================================== [ 415.141877] BUG: KASAN: use-after-free in n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.149437] Read of size 1 at addr ffff88807d1c0d43 by task syz-executor.5/17683 [ 415.162537] [ 415.164192] CPU: 1 PID: 17683 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 415.172005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.181478] Call Trace: [ 415.184100] dump_stack+0x197/0x210 [ 415.187772] ? n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.193007] print_address_description.cold+0x7c/0x20d [ 415.198453] ? n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.203675] kasan_report.cold+0x8c/0x2ba [ 415.207857] __asan_report_load1_noabort+0x14/0x20 [ 415.212814] n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.217861] ? find_held_lock+0x35/0x130 [ 415.221980] n_tty_receive_buf2+0x34/0x40 [ 415.226148] tty_ldisc_receive_buf+0xad/0x1c0 [ 415.230781] ? add_wait_queue+0x112/0x170 [ 415.235936] ? n_tty_receive_buf_common+0x2ab0/0x2ab0 [ 415.241211] paste_selection+0x1ff/0x443 [ 415.245297] ? set_selection+0x1370/0x1370 [ 415.249566] ? lock_downgrade+0x880/0x880 [ 415.253737] ? wake_up_q+0x100/0x100 [ 415.257565] tioclinux+0x133/0x470 [ 415.261192] vt_ioctl+0x19ab/0x2530 [ 415.264842] ? complete_change_console+0x3a0/0x3a0 [ 415.270098] ? avc_has_extended_perms+0xa78/0x10f0 [ 415.275058] ? avc_ss_reset+0x190/0x190 [ 415.279184] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 415.284403] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 415.288852] ? complete_change_console+0x3a0/0x3a0 [ 415.293978] tty_ioctl+0x7f3/0x1510 [ 415.297632] ? tty_vhangup+0x30/0x30 [ 415.301470] ? mark_held_locks+0x100/0x100 [ 415.305749] ? __fget+0x340/0x540 [ 415.309323] ? __might_sleep+0x95/0x190 [ 415.313325] ? tty_vhangup+0x30/0x30 [ 415.317074] do_vfs_ioctl+0xd5f/0x1380 [ 415.320993] ? selinux_file_ioctl+0x46f/0x5e0 [ 415.325647] ? selinux_file_ioctl+0x125/0x5e0 [ 415.330177] ? ioctl_preallocate+0x210/0x210 07:14:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="05") [ 415.335152] ? selinux_file_mprotect+0x620/0x620 07:14:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x5) [ 415.335186] ? iterate_fd+0x360/0x360 [ 415.335207] ? nsecs_to_jiffies+0x30/0x30 [ 415.335233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.335252] ? security_file_ioctl+0x8d/0xc0 [ 415.335273] ksys_ioctl+0xab/0xd0 [ 415.335294] __x64_sys_ioctl+0x73/0xb0 [ 415.335314] do_syscall_64+0xfd/0x620 [ 415.335336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.335349] RIP: 0033:0x45b349 [ 415.335366] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:14:30 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x6) [ 415.335375] RSP: 002b:00007fc6dce87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.335390] RAX: ffffffffffffffda RBX: 00007fc6dce886d4 RCX: 000000000045b349 [ 415.335400] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 415.335409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 415.335418] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 415.335427] R13: 0000000000000550 R14: 00000000004c69a1 R15: 000000000075bf2c [ 415.335450] [ 415.335458] Allocated by task 17674: [ 415.335474] save_stack+0x45/0xd0 [ 415.335488] kasan_kmalloc+0xce/0xf0 [ 415.335501] __kmalloc+0x15d/0x750 [ 415.335514] set_selection+0x7e4/0x1370 [ 415.335539] tioclinux+0x11c/0x470 [ 415.335551] vt_ioctl+0x19ab/0x2530 [ 415.335565] tty_ioctl+0x7f3/0x1510 [ 415.335578] do_vfs_ioctl+0xd5f/0x1380 [ 415.335590] ksys_ioctl+0xab/0xd0 [ 415.335603] __x64_sys_ioctl+0x73/0xb0 [ 415.335617] do_syscall_64+0xfd/0x620 [ 415.335631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.335635] [ 415.335642] Freed by task 17703: [ 415.335656] save_stack+0x45/0xd0 [ 415.335671] __kasan_slab_free+0x102/0x150 [ 415.335684] kasan_slab_free+0xe/0x10 [ 415.335696] kfree+0xcf/0x220 [ 415.335709] set_selection+0x801/0x1370 [ 415.335723] tioclinux+0x11c/0x470 [ 415.335734] vt_ioctl+0x19ab/0x2530 [ 415.335748] tty_ioctl+0x7f3/0x1510 [ 415.335761] do_vfs_ioctl+0xd5f/0x1380 [ 415.335773] ksys_ioctl+0xab/0xd0 [ 415.335786] __x64_sys_ioctl+0x73/0xb0 [ 415.335801] do_syscall_64+0xfd/0x620 [ 415.335814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.335818] [ 415.335829] The buggy address belongs to the object at ffff88807d1c0600 07:14:30 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5500000018007f5b00fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10000, 0x7) [ 415.335829] which belongs to the cache kmalloc-131072 of size 131072 [ 415.335842] The buggy address is located 1859 bytes inside of [ 415.335842] 131072-byte region [ffff88807d1c0600, ffff88807d1e0600) [ 415.335848] The buggy address belongs to the page: [ 415.335861] page:ffffea0001f47000 count:1 mapcount:0 mapping:ffff88812c315680 index:0x0 compound_mapcount: 0 [ 415.335876] flags: 0xfffe0000008100(slab|head) [ 415.335895] raw: 00fffe0000008100 ffffea0000d44008 ffffea0000dce008 ffff88812c315680 [ 415.335912] raw: 0000000000000000 ffff88807d1c0600 0000000100000001 0000000000000000 [ 415.335917] page dumped because: kasan: bad access detected [ 415.335920] [ 415.335924] Memory state around the buggy address: [ 415.335934] ffff88807d1c0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.335944] ffff88807d1c0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.335955] >ffff88807d1c0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.335961] ^ [ 415.335973] ffff88807d1c0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.335984] ffff88807d1c0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.335989] ================================================================== [ 415.335994] Disabling lock debugging due to kernel taint [ 415.460554] IPv6: Can't replace route, no match found [ 415.599095] IPv6: Can't replace route, no match found [ 415.605571] Kernel panic - not syncing: panic_on_warn set ... [ 415.605571] [ 415.683564] IPv6: Can't replace route, no match found [ 415.694426] CPU: 1 PID: 17683 Comm: syz-executor.5 Tainted: G B 4.19.97-syzkaller #0 [ 415.694433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.694438] Call Trace: [ 415.694468] dump_stack+0x197/0x210 [ 415.694487] ? n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.694508] panic+0x26a/0x50e [ 415.867724] ? __warn_printk+0xf3/0xf3 [ 415.867746] ? n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.876860] ? preempt_schedule+0x4b/0x60 [ 415.881047] ? ___preempt_schedule+0x16/0x18 [ 415.885568] ? trace_hardirqs_on+0x5e/0x220 [ 415.889917] ? n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.889937] kasan_end_report+0x47/0x4f [ 415.899114] kasan_report.cold+0xa9/0x2ba [ 415.903735] __asan_report_load1_noabort+0x14/0x20 [ 415.908669] n_tty_receive_buf_common+0x26a4/0x2ab0 [ 415.913696] ? find_held_lock+0x35/0x130 [ 415.917771] n_tty_receive_buf2+0x34/0x40 [ 415.921957] tty_ldisc_receive_buf+0xad/0x1c0 [ 415.926726] ? add_wait_queue+0x112/0x170 [ 415.930876] ? n_tty_receive_buf_common+0x2ab0/0x2ab0 [ 415.936339] paste_selection+0x1ff/0x443 [ 415.940421] ? set_selection+0x1370/0x1370 [ 415.944843] ? lock_downgrade+0x880/0x880 [ 415.949000] ? wake_up_q+0x100/0x100 [ 415.952730] tioclinux+0x133/0x470 [ 415.956270] vt_ioctl+0x19ab/0x2530 [ 415.959957] ? complete_change_console+0x3a0/0x3a0 [ 415.964906] ? avc_has_extended_perms+0xa78/0x10f0 [ 415.969839] ? avc_ss_reset+0x190/0x190 [ 415.973825] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 415.979124] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 415.983465] ? complete_change_console+0x3a0/0x3a0 [ 415.988414] tty_ioctl+0x7f3/0x1510 [ 415.992041] ? tty_vhangup+0x30/0x30 [ 415.995758] ? mark_held_locks+0x100/0x100 [ 415.999994] ? __fget+0x340/0x540 [ 416.003471] ? __might_sleep+0x95/0x190 [ 416.007458] ? tty_vhangup+0x30/0x30 [ 416.011219] do_vfs_ioctl+0xd5f/0x1380 [ 416.015109] ? selinux_file_ioctl+0x46f/0x5e0 [ 416.019612] ? selinux_file_ioctl+0x125/0x5e0 [ 416.024192] ? ioctl_preallocate+0x210/0x210 [ 416.028605] ? selinux_file_mprotect+0x620/0x620 [ 416.033375] ? iterate_fd+0x360/0x360 [ 416.037235] ? nsecs_to_jiffies+0x30/0x30 [ 416.041395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.046938] ? security_file_ioctl+0x8d/0xc0 [ 416.051350] ksys_ioctl+0xab/0xd0 [ 416.054826] __x64_sys_ioctl+0x73/0xb0 [ 416.058743] do_syscall_64+0xfd/0x620 [ 416.062587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.067837] RIP: 0033:0x45b349 [ 416.071052] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.089995] RSP: 002b:00007fc6dce87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.097706] RAX: ffffffffffffffda RBX: 00007fc6dce886d4 RCX: 000000000045b349 [ 416.105426] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 416.112713] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 416.119991] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 416.127435] R13: 0000000000000550 R14: 00000000004c69a1 R15: 000000000075bf2c [ 416.136081] Kernel Offset: disabled [ 416.178690] Rebooting in 86400 seconds..