x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) write$eventfd(r6, &(0x7f0000000040)=0x1, 0x8) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/rl\x00\x00\x02\x00', 0x200, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) [ 554.736078][T22573] ptrace attach of "/root/syz-executor.5"[22572] was attempted by "/root/syz-executor.5"[22573] 01:31:41 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket(0x23, 0x4, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) epoll_create1(0x0) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) mq_unlink(&(0x7f0000000040)='\x00') ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r2, 0x1000000) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa00, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xfffffffffffffff7, 0x6800) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x2}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000400)={r6, 0x2}, 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000340)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r4) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x400, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', r9}, 0x10) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) fstat(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r10, r11) sendfile(r0, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x6, 0x7, 0xcd2, 0x0, 0xdcf, 0x6, 0x6, 0xffffffff, 0x401, 0x20, 0x1f, 0x9, 0x80}, {0x3f, 0x20000000000, 0x5, 0x101, 0x9, 0xbd, 0x7ff, 0x101, 0x7fff, 0xffff, 0x1, 0x7, 0x3}, {0x101, 0x2, 0x8, 0x100000001, 0x3f, 0x7f, 0x7, 0x4, 0xfff, 0x0, 0x6, 0xfffffffffffffc00, 0x1}], 0x1}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) read(r2, &(0x7f0000000000)=""/39, 0x27) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:41 executing program 5: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00\x00\x00\x01\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000"]}) keyctl$get_keyring_id(0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 01:31:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000000c0)={0x3, 0x6, 0x1, 0x1, [], [], [], 0x7fffffff, 0x1, 0x5919, 0x100, "e5f09d7b1e3ee2efc7ceb802dc6292a6"}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix_mp={0x0, 0x8, 0x25582542, 0x7, 0xa, [{0x2, 0x2d}, {0x2, 0x8001}, {0x2, 0x4}, {0x1ff, 0xdd}, {0x1, 0xfff}, {0x401, 0x7fff}, {0x7, 0x9}, {0x5, 0x20}], 0x8, 0x401, 0x2, 0x2, 0x6}}) 01:31:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0200c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:42 executing program 5: dup(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='uid_map\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:31:42 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/4096, 0x1000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x760025) 01:31:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c003fc0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:42 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000, 0x2000) 01:31:42 executing program 5: r0 = socket(0x2, 0xc003, 0x0) connect$unix(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8202adfdffffffffffffff653000463f7b238bf468fb5111a58de258bde3bdfc54d78a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799b9b813a36f3047a54cb4e78fe43bf232ad30505e8f5300a49fef01612f871f4385f04157795fa4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd235f6ff00"/200], 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="6861fe261e6f64378b5e05cdf304b826010000000000000000000000e2597291bd508928c1fcdf82fa627475b78f00"/60, 0x3c, 0x0, 0x0, 0x0) 01:31:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000000)="01b5bd720606ea28a2416727275d8b4b40850408cb3c6813955f2514307d7e4405380bdb541eef8d0d5fc88ee4299ee9dd2fe8fde26471b3dd67240dba58591805cc3f7d41c79afefb90eeb4094d7ba9b24a9f603f56b166d2ad6c3dd376d65759154b9f9de379ab6a572b52af6268a4333d7e52") ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) socket$tipc(0x1e, 0x2, 0x0) [ 555.617685][T22633] mmap: syz-executor.1 (22633) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 01:31:42 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000340)) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x100000}, 0x80) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x3b) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x760025) 01:31:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0040c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x8, 0x5, {0xf0, 0x5, 0x7, {0x3, 0x8}, {0x5, 0x5}, @cond=[{0x8, 0x2, 0x8, 0x4, 0x8000}, {0xfffffffffffffff7, 0x2, 0x0, 0x8, 0x6, 0x4}]}, {0x53, 0xfffffffffffffffe, 0x88, {0x6dcc7530, 0xfffffffffffffffe}, {0x9, 0xffff}, @period={0x59, 0x800, 0x8, 0xff, 0x0, {0x2, 0x9, 0x3, 0xc000000000000000}, 0x4, &(0x7f0000000040)=[0xffffffff7fffffff, 0x3, 0x1f, 0x6298]}}}) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:42 executing program 5: socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 01:31:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x15b, &(0x7f00000000c0)={@broadcast, @remote, [{[{0x9100, 0x7, 0x2}], {0x8100, 0x7, 0x655, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "eb36a2", 0x11d, 0xc3, 0xfffffffffffffe00, @local, @loopback, {[@srh={0x3c, 0x2, 0x4, 0x1, 0x100000000, 0x44, 0x1, [@remote]}], @tcp={{0x4e23, 0x4e22, r1, 0x41424344, 0xf06a, 0x0, 0x7, 0x2, 0x4, 0x0, 0x5, {[@exp_smc={0xfe, 0x6}]}}, {"0965cc017652cb116f44bef9199bd5d6b277c6f3f141642df57f621ed6b9fc14de0d0ffb05a67441d9561c4b57eacb9804ff0c516e65049e75a1e993876ddaeb5488ffdb72f3d4191810db01e626b1d36d7648ef324167a8580f3820ee8a098923a9f30d0a56232fee97588f9044a260a485770c1cc2ca05730b98ee4579dc1d7cc816d17b2bd2ee4b34196087207c53ff269e2a40c133589ca9445a1e35e93fb7e158ca4b5b8d35ee9cddacb3b16d9fa214808fbb8da6d91db1a57972e45f69dabb3ab04b32e81f64b3bc09c222f5a5a7f33a566679ec99fdc55ac26418970b364be9fac50b38ce42"}}}}}}}, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c00800efe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x30100, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x7f}}, {@mode={'\x00', 0x3d, 0xab}}, {@mode={'mode', 0x3d, 0x59}}, {@mode={'mode', 0x3d, 0x6b}}, {@mode={'mode', 0x3d, 0x7fff}}], [{@smackfshat={'smackfshat', 0x3d, '[!vboxnet0selinuxwlan1'}}, {@subj_user={'subj_user', 0x3d, '/dev/ubi_ctrl\x00'}}, {@seclabel='seclabel'}]}) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 01:31:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$smack_current(r3, &(0x7f0000000040)='/dev/vbi#\x00', 0xa) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:43 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x1, "89"}, &(0x7f0000000180)=0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000040)={0x1, 0x1}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r2) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x169, "6040ccfd9a2940956039b030e3937e01845f630112a15d07d9047fc0e25ed7ea85d9cf6aa6bd363ece99fc1e60b768b4e24a7d7e1c731e2145f807006d2d47441698aa5baf63a7568d6ee1a036db7ff950d21600c8ff99a8b000be91a376"}, &(0x7f00000001c0)=0xffffff36) 01:31:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) 01:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0002c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4000, 0x2, 0x10000, 0x2, 0x3a34c6d7, 0xce, 0x1f, 0x9, 0x1, 0xff, 0x0, 0x8, 0xf7b, 0x0, 0xbc9d, 0x6, 0x1, 0x47, 0x1, 0x0, 0xffffffffffffffff, 0x7ff, 0x0, 0x9, 0x7, 0x7fffffff, 0x101, 0x49be, 0xa84, 0x2, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0x3b4, 0x2, 0x3, 0x4, 0x0, 0x1}, r0, 0xb, r2, 0x4) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92c, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) semget$private(0x0, 0x7, 0x10) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800540, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0966646e2fc1", @ANYRESHEX=r0, @ANYBLOB="2c6e6f657874656e642c756e616d653d2e707070317070703165746831212c6673757569643db0313657313333312d1d6230362d373736362d346162c02d36216665396666622c00"]) 01:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0019fffe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:43 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m}mory.eventS\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6612) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/976, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r8}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000026c0)={r8, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x14d, 0xa, 0xa00000000000, 0x100, r8}, &(0x7f0000000200)=0x10) r9 = dup(r3) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @rand_addr=0x5}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x644, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='nlmon0\x00', 0x10001, 0x7f, 0x1}) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) socket(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0) 01:31:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000400)={{0x6, 0x6, 0x1, 0x80000001, '\x00', 0xffffffffffff817f}, 0x0, 0x52, 0x101, 0x0, 0x6, 0x4, 'syz0\x00', &(0x7f0000000140)=['em1loeth0\x00', '/dev/ubi_ctrl\x00', 'bbr\x00', 'bbr\x00', 'ppp1\xca\x00', '/dev/ubi_ctrl\x00'], 0x34, [], [0x100000001, 0x5, 0x4, 0x6]}) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, r3) 01:31:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe026031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/\x86ev/\x88\xb8A\xd7wN\xb4nV', 0x691744, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)={0x1a, 0xa, 0x4, 0x800, {r3, r4/1000+30000}, {0x4, 0xc, 0x200, 0x7, 0x6, 0xffffffff00000000, "9032adfc"}, 0x79346707, 0x4, @planes=&(0x7f00000001c0)={0x366, 0x80, @fd=r6, 0x401}, 0x4}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x2, r8}) perf_event_open(&(0x7f0000000080)={0x472958c2497b6b3a, 0x70, 0x4, 0x9, 0x9, 0x9, 0x0, 0x1b, 0x400, 0x0, 0x8000, 0x1000, 0x93, 0xb4, 0x80000000, 0x1ff, 0x6, 0x1, 0x6, 0x80, 0x90000000000000, 0x0, 0x101, 0x5, 0x5, 0x8001, 0x3ff, 0x7fffffff, 0x7, 0x4, 0x3, 0x1f, 0x8000, 0x8, 0xffff, 0x7681, 0x0, 0x2, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x17}, 0x8000, 0x9, 0x3, 0x0, 0xfffffffffffffffb, 0x1, 0xffffffffffffff4c}, r8, 0x8, r0, 0x3) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031029210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:31:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2400, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "b84e97e59c3a7c4dd2132e5a342de739"}, 0x11, 0x3) 01:31:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000080)='k', 0x1, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000040), 0xfd1b, 0x4004800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ad", 0x1, 0x0, 0x0, 0x0) 01:31:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x23) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031039210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:44 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xc0, 0x15, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x8, 0xfffffffffffffa18, 0x6, 0x8000, 0x2}) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x3, 0x401}, {0x344, 0x10001}], r7}, 0x18, 0x2) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000340)={[{0x3, 0x1, 0x81, 0x101, 0x401, 0xfffffffffffff3ae, 0x0, 0x4, 0x6, 0xe9a, 0x8, 0x3f, 0x4}, {0x1f, 0x7, 0xde7, 0x160f, 0x9, 0x8, 0x400, 0x5, 0x5, 0x6, 0x2, 0x8d5, 0xf47c}, {0x0, 0x9, 0x9, 0x5, 0x3ff, 0x3, 0x0, 0x6, 0x8001, 0x8, 0xbd64, 0x9, 0x9}], 0x401}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x760025) 01:31:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031049210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=""/61, &(0x7f00000000c0)=""/11, &(0x7f0000000100)=""/232, 0x4000}) r4 = dup(r1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000000)) 01:31:44 executing program 4: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x760025) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x81a, 0x301400) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x2}}, 0x8, 0x10000, 0x800, 0x8, 0x9}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) 01:31:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031059210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:45 executing program 4: epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x8) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6f8840, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031069210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:45 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6(0xa, 0x2, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000480)={0x0, 0x8, &(0x7f00000000c0)=[0x10000, 0x3f, 0x7, 0x762f, 0x20000000, 0xffff, 0x100000000, 0xfffffffffffffffb], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 01:31:45 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = open(0x0, 0x20000, 0x40) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r3, 0x30, 0x1, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000200)=0x7fffffff) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0xb, 0x4ff1dad5, 0xa084}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000280)={0x2, 0x0, [], {0x0, @bt={0x81, 0x5, 0x0, 0x2, 0x1, 0x7, 0x800, 0x401, 0x9, 0x3, 0x9, 0x8, 0x5, 0x9, 0x0, 0x8}}}) 01:31:45 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031079210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="030105000000000000e6ce5ec129d5becec96ed4930ed30c94f53d4db7293a58611e4c36b42ffb47d87a0b23d6142a6170083d306a09465af8f57769cfd1b9606f2c56b9911c0226d36f9a654be6e45a3c0b0eb7253d889a13963472890a25e29bacb6bb0d3f8d00001f4d9b1986bdc45b4890bf0ec3ad29e3ae2bfd3e3f1b98b4deb60e0ceeef4d670f1cae86b0bf072fb5c90735cec525b9d9a73e3acd295951e87f823abc37137461152acbabda53a2cb4dccfccacb48937aa8fa1e9254656bafd63da5d3087ac008c230e700dc618ad8c68c799127deacb25fba3ec98c41360ba41e152828cec3a76feca82c1c06"], 0xf0, 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:45 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x3ff, 0xa, 0x0, 'syzkaller\x00'}}]}, 0xb8) 01:31:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031089210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='\x00@evDubi\xc0\x00\x90xl\x00', 0x10000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r4, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x304c2020}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xb4, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9bb}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000810) 01:31:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031099210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 559.477682][T22872] IPVS: Unknown mcast interface: syzkaller1 01:31:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x12800, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x8) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:46 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x200) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0x9, 0x401, 0xd02d, 0x4, 0xc4, 0xb, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x760025) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@remote}, &(0x7f0000000100)=0x14) 01:31:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310a9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:47 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800102, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = fsopen(&(0x7f0000000100)='romfs\x00', 0x0) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000300)=0x9000, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r9) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x80000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r12 = dup(r11) ioctl$int_in(r12, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r12, 0x8048ae66, 0x0) ioctl$ASHMEM_GET_SIZE(r12, 0x40046f41, 0x760025) 01:31:47 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x7, 0xffffffffffffa8f5}) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) pipe2(&(0x7f0000000080), 0x6000) perf_event_open(&(0x7f000001d000)={0x1, 0x388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x285}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310b9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:47 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r5, 0x1) recvmsg(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x844, 0xde, 0x5, 0xa, 0xfffffffffffffc01, 0x9, 0x7, 0x81, 0x9, 0x1, 0x206}, 0xb) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x3, 0x9}) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x5b3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:47 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:47 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310c9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:48 executing program 4: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audbo\"\x00', 0x100, 0x800) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x410000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/41) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000000c0)=""/205) 01:31:48 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:48 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10801, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) 01:31:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310d9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:48 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) pipe2(&(0x7f0000000000), 0x4000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffb, 0x400000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x760025) 01:31:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x6141ef76, 0x2, 0x2, 0xdab006a1b18a953d, 0x2020000000, 0x4}, &(0x7f0000000080)=0x20) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:48 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r0, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310e9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = dup(r1) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x20000) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000d40)) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)={{0x31e, 0x9, 0x5, 0x31a, 0x294, 0x4, 0x8c, 0x7fffffff}, "285c951b865c6eb4d066796a44d2edda64396c547bb481bb4fc3293d19a10f96aa827093b71f95e5a51d2c256f7da8635c25d0fac2b757f6a6ee48a6750408f4ac9e20cc363842bba5f53c099ae38a0efbc6bd89831d62e32b82530928f2b44dbc630186c104ac9bd6a0dfa39e2dec5e5244df9274e55b3599582ca38aa8931d5e6172d4dc05ce69fe7df26cea6f597e6e5cae37964d508d6249b89cbe5749ab582f7dfa3ffafc9590863ba28ce68cc080", [[], [], [], [], [], [], [], [], []]}, 0x9d1) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x760025) 01:31:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:31:48 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r0, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r0, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000000)=""/73, &(0x7f00000000c0)=0x49) 01:31:49 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe0060310f9210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:49 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64}, 0x7ba2982991d4d7b7) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000040)={0x0, 0xb6}) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) set_robust_list(&(0x7f0000000340)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x1113, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x200800, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:31:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031109210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?%`@{,vmnet1em0user\x00', 0x1) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000000c0)={0x0, 0x0, 0x2080}) 01:31:49 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)) 01:31:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031119210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x4534) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1ff, 0x8800) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000001c0)={0x80, 0x1}) 01:31:50 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='\x1as\x93\xaf\x94w\xd81\x93\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x7, 0x1, 0x1, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)={0x40002013}) r7 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r7, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 01:31:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031129210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) 01:31:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r6) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r6, 0x1) recvmsg(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r7) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r7, 0x1) recvmsg(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r3, r5, r6, r7], 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/Ro#\x00\x00\x00P\x00\x00\x00\x00\xee\xff', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0xee}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) 01:31:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 01:31:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409202442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:50 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) pipe2(&(0x7f0000000040), 0x2000) 01:31:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 01:31:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r1]) 01:31:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x46a842, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:50 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001c40)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) 01:31:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409203442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) 01:31:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) recvmmsg(r0, &(0x7f0000005600)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x6}, 0xffffffffffff8bf3}, {{&(0x7f0000001440)=@rc, 0x80, &(0x7f0000001740)=[{&(0x7f00000014c0)=""/162, 0xa2}, {&(0x7f0000001580)=""/19, 0x13}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/77, 0x4d}, {&(0x7f0000001680)=""/61, 0x3d}, {&(0x7f00000016c0)=""/69, 0x45}], 0x6, &(0x7f00000017c0)=""/251, 0xfb}, 0x7}, {{&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001940)=""/172, 0xac}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/184, 0xb8}, {&(0x7f0000002ac0)=""/241, 0xf1}, {&(0x7f0000002bc0)=""/28, 0x1c}, {&(0x7f0000002c00)=""/68, 0x44}, {&(0x7f0000002c80)=""/234, 0xea}, {&(0x7f0000002d80)=""/49, 0x31}], 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002e40)=""/174, 0xae}, {&(0x7f0000002f00)=""/21, 0x15}, {&(0x7f0000002f40)=""/124, 0x7c}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x4, &(0x7f0000004000)=""/21, 0x15}, 0x5de6}, {{&(0x7f0000004040)=@rc, 0x80, &(0x7f0000005540)=[{&(0x7f00000040c0)=""/208, 0xd0}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/193, 0xc1}, {&(0x7f00000052c0)=""/84, 0x54}, {&(0x7f0000005340)=""/187, 0xbb}, {&(0x7f0000005400)=""/197, 0xc5}, {&(0x7f0000005500)=""/26, 0x1a}], 0x7, &(0x7f00000055c0)=""/63, 0x3f}, 0x9}], 0x5, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) syz_open_dev$usbmon(&(0x7f0000005780)='/dev/usbmon#\x00', 0x7, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000005740)) 01:31:51 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r0, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040), 0xfffffdc1) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xb9e55656c7a8d3f7, 0x0, 0x8}, 0xffff}}, 0x18) sched_rr_get_interval(0x0, &(0x7f0000000140)) dup2(r1, r0) 01:31:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409204442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:51 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:31:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409205442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='/dev/swradio#\x00', 0x1) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200447bc, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0xffffff1e) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setresuid(0x0, r6, 0x0) r7 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r7, &(0x7f0000000480)=""/120, 0x78) keyctl$get_persistent(0x16, r6, r7) 01:31:51 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) preadv(r2, &(0x7f00000025c0), 0x100000000000008f, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) socket$caif_stream(0x25, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000300)=0x7e, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000180)=0x1ff) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r7 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r7, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x810, 0x1, 0xfffffbfbfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ba1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x1000000eefffdec) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)) 01:31:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x239) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="06020401097c0500fe8000000000000000000000000040aae67d40084689ce49f714"], 0x18) socket$inet(0x2, 0x800, 0x7) 01:31:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) 01:31:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409206442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r4) 01:31:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409207442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:52 executing program 4: r0 = msgget(0x3, 0xc0c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x63, 0x2, 0x9, "c3fa295877f4dd159223e51f4a52a907", "45fc0b5a45bcf45ea9e03900900fe4167258afa9f588cfdbedabd4f11271b1f61a9a9783fe2d2e62f1cdfc460e59ff20d049e1d78faab76dce5c08e80a4fdf8d2a2c154538addb807a060b57bbb9"}, 0x63, 0x3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) r6 = getgid() socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, r6}, 0xc) r7 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x2, r8}) r9 = getpgid(r8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x2, r2, r3, r5, r6, 0x80, 0x7}, 0x3, 0x52ae, 0x5f9, 0x7e0, 0x7fff, 0x7, r9, r10}) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f00000000c0)) setgid(r12) ioctl$ASHMEM_GET_SIZE(r11, 0x40046f41, 0x760025) r13 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x776, 0x80000) write$UHID_INPUT(r13, &(0x7f00000012c0)={0x8, "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", 0x1000}, 0x1006) 01:31:52 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 01:31:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x2) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409208442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:52 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000140)=0x1af) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000080, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(0xffffffffffffffff) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) setsockopt(r5, 0x3e7, 0x3f, &(0x7f0000000340)="f6cb755b33348d2e0ed187e7522d00955fd560618d462fbc41237f1e668ba30fcb0cf960929454554f92046781494706c3bd661f18fdc762b74e7dfa3917df09b8b742fdce6940ea1890c2fc14f63e705975bf600ae65b4648111301aa75f50f99bbd1ff637b7d672c8e4c1739215a7b4a8a3e2f9fae4faf7cadc619db8f9a6e160672e0d15479eec4e742fa2d94f22d949a4ee35753296e4670bd188f89f15238dcfb9cf95f", 0xa6) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000040)=""/88) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x0, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e26, @rand_addr=0x85}, 0xffffffffffffff8c) r13 = dup(r12) ioctl$int_in(r13, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r13, 0x8048ae66, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r13, 0x80845663, &(0x7f0000000400)) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x100000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x3, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40, 0x7, 0x0, 0x78a}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000140)=0x4) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x2, r8}) mq_notify(r6, &(0x7f0000000200)={0x0, 0x3b, 0x0, @tid=r8}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x7fffffff, 0x12) 01:31:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x521000, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @local}, &(0x7f0000000240)=0xfffffffffffffea1) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0xfffff10, 0x0, 0x0, 0x7115}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000003c0)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000400)={r7, 0x1, 0x6, @dev={[], 0x16}}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x8}}, 0x24) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r9) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r9, 0x1) recvmsg(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0xfffffffffffffff9}, 0xffffffffffffff94) r10 = dup(r8) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) connect$ax25(r10, &(0x7f0000000440)={{0x3, @default, 0x8}, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 01:31:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000040)='\x05\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) 01:31:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409209442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000001740), 0x4) r7 = dup(r4) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$EVIOCSABS3F(r7, 0x401845ff, &(0x7f00000016c0)={0x4, 0xffffffffffffff80, 0x5, 0x4, 0xfffffffffffffffa, 0x1000}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r3) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) ioctl$KVM_GET_REGS(r8, 0x8090ae81, &(0x7f0000001600)) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000001700)={0x3, 0x48d8}) write$P9_RLCREATE(r2, &(0x7f00000015c0)={0x18, 0xf, 0x2, {{0x2, 0x0, 0x7}, 0x8001}}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x7, &(0x7f0000001440)=[{&(0x7f00000000c0)="1bab0d008496e460cc9d946cf33327a25fd977", 0x13, 0x3}, {&(0x7f0000000100)="f716b5b23c66", 0x6}, {&(0x7f0000000140)="7ede92edbbcd779dfe9dd2ce20250241e80a1c9b3c5f1c95279ca6dfea1d2ca4df5e33f86fe459b6bd17ba2e1d383fa3deece114cd724304105da8c8c9b767a9f36fd3285844185bf7805c1238e447b233dbe6a02f40f768ccc607685800116fac62a0785dc58968ac86bf346bce3ca0eb97c692f981532e1988632d779d0e56556751739413764c424f2b6c8ccee6b0f8cf34beab2dec9a295484448a59c16976d5720b1c569c9deb48f06722ecb08115a196b15b75959c8b39f06688c98ea7ee0f585c37e35423711c450194e738f6fb5fbef53584ac467f1f52a6e273c9e21141a9435106788fb9646061467a4ff1b923265174", 0xf5, 0x878}, {&(0x7f0000000240)="b6b4d88eba7363ad7fc78d36daec1a1d4c36fdcf1bcc7eb4143326403a3a36ba4331ae855e7374ba7ebd6763366d0820079775bb3e3d83f112784b0cc78fb557f82879cac714e912a7ac0451e563798ba3ea64c2bc8ca41c066da1bf5e02913c437d0acb0a2a278daa526f5d5648159e4a14da0386af18da5732a768fab02a1bf20efe9cef9434be441fc447431f70c3e6", 0x91}, {&(0x7f0000000300)="6904a4ea0568857c13d240141c1e6debe07d878839c09062d78c2f6f6804384a64ffcb299978eded26c638c18d599a80e7bfcd0f1fa791d27e262fecb816f6a2a5e09240d46e7d8ba22bbf746fd562d5dd9f18a1b169f80933b486da5d42378c44b8942b5a6dec710edc6c04feade9c84ef6b9fc942f12ca51a0e9", 0x7b, 0x400}, {&(0x7f0000000380)="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", 0x1000, 0x200}, {&(0x7f0000001380)="9038e9eb16ed0ca1740557f3e36be2eca829d1379ab99466f4bcfd2a7902fb94b58f7a0476dfe8c61a306ffa201c8617544edccdd74b16ed5f2d8b984922c901577bfabc33e864c0ddc6bcdcbb93e8a62e9692087b89d831a37bca04bf4b0e8f1d6cb43274fc815ff703861ccd80b19aa68e0f356307af6038e58c069be5bea5302da90b5a2e8dcb5423ee75995bb86b365d5150b2f032cf3cfd9d930ad79d840b4976", 0xa3}], 0x800, &(0x7f0000001500)={[{@map_normal='map=normal'}, {@block={'block', 0x3d, 0xa00}}], [{@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x38, 0x31, 0x3, 0x36, 0x65, 0x65], 0x2d, [0x66, 0x37, 0x61, 0x29e2621fcd93ad7b], 0x2d, [0x31, 0x65, 0x0, 0x62], 0x2d, [0x5357d95cb9e2dd05, 0xa7, 0x31, 0x61], 0x2d, [0x61, 0x38, 0x34, 0x32, 0x0, 0x34, 0x6, 0x31]}}}, {@appraise_type='appraise_type=imasig'}, {@subj_role={'subj_role', 0x3d, '#vboxnet0*selinuxuservboxnet1\xa9[\xe2'}}]}) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r0, 0xd48546bcf0d38b5, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x53}) pipe2(&(0x7f0000000100), 0x400) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0xc00) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) splice(r1, &(0x7f00000001c0)=0x1, r2, &(0x7f0000000140)=0x200000000000, 0xfffffffffffff801, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x760025) 01:31:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x0, 0x7ff}) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:31:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920a442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x10001, 0x1ff, @value}) 01:31:53 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getuid() r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}], 0x20) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2800, 0x132) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000240)={0x3, "d87f0eb6a1a5bb2244e53dc614820508ac9150b9cdb5696d96708a0007e3e6eb", 0x1000, 0x8, 0xfffffffffffffffe, 0x10, 0x1}) setsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f0000000140)="ccbce6f02b4d0e2431aeb7930fdde6804e99f4db3293082287aeb9235becd75b1f6efd3dd705827b5331384461f8a82c773ce0a9fa4bb718f1853d26bf99e99067953bb9f87fa95232fece06893647d65880c0bce1373cf23d4a768392f6a2331b7b3a77ca4f78aaeae055dd0cf27c5bfcd2cd76e3b4f30294cb6c", 0x7b) 01:31:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920b442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40041, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="23000000520081529117edcaa3000000000000cb183200"/35, 0x23}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002900), 0x1e1, 0xc00e, 0x0) 01:31:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:53 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000340)=""/80, 0x50) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x402) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x41}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000000c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x760025) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000240)={0x1, 0x103, 0x6, {0x58, 0x4, 0x4, 0xce}}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = accept(r5, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000180)=0x80) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 01:31:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920c442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) 01:31:53 executing program 5: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x84) 01:31:54 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='uid_map\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:31:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xffffff94) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) fcntl$addseals(r2, 0x409, 0x7) 01:31:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920d442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000090002c69cf257e6429800000000000002000000000000000900000000000000c9080000000000000899475903000000"]) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000040)="1d3e28735514a5e4543d17d700ed6afcd8c86f77541191e288d3d3b5ff13e0a12588504bb4482d9cf18b1508c3f0505c97df54b4615af96ae5e00785a5f8", &(0x7f0000000080)="2e0b49f22bc550c1e910bf1e28fef91efd1bb2efb6e78de6c3ef8f2417210815933c292f48ffe43930d54f9031f6842736", 0x3}, 0x20) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80c00, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x640000, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000000c0)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0xb, [@func={0x9, 0x0, 0x0, 0xc, 0x1}, @fwd={0xe}, @datasec={0xc, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x7f}, {0x1, 0x92a8, 0x7}, {0x2, 0x575, 0x3}], "16"}, @func={0xe, 0x0, 0x0, 0xc, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @fwd={0xf}, @fwd={0xe}]}, {0x0, [0x5f, 0x5a, 0x0, 0x5f, 0x284ce78b65a6c8be, 0x61, 0x0, 0x9e, 0x5f]}}, &(0x7f0000000200)=""/187, 0xab, 0xbb}, 0x20) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff7, 0x9, 0x4, 0xa, 0x361e, 0x3, 0x3, 0x7, 0x142, 0x40, 0x385, 0x100000001, 0xffffffff, 0x38, 0x2, 0x0, 0xe42, 0x5}, [{0x7000000e, 0xa000000000000, 0x7f, 0x4, 0x8, 0x2, 0x3, 0x19}], "6d557c7da6a5b226e2a4bef74a9523974b970def02885e4cf1fa124792ea89fc2eb2881e97ff512d36c2999962463c55285e37de0972d232a3561a47046f3dfe92d1376daf90868f28d4aa223f06b760f152e1db62d5155f50fac066d27353a3e2acb0bc0abbd8323276a12181120f4b87e4a05bdd00a01a5cc12dc583931b84fe9d1aa5533e3018cd40d5b88555a9abe00c7b371bcbaf9941d4546b31427d840fdb80d4e53130f9675adc4b8fff536211a3031aefc607cc7798091320dcf215225501ea0fbf55828a52cbbb82310d2fef8c3b10fa89cded5a1041748738f7ccdabaf624595173d561c16b3bfa5b3b81851e8847d57baa0d6176ef05220f43"}, 0x177) 01:31:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920e442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 567.605880][T23323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.630783][T23323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.677057][T23323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.803058][T23329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:31:54 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/\xd7)Fl#\x05\x00', 0x20101, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) [ 567.857248][T23329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:31:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) fcntl$setflags(r1, 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314, 0x0, 0x20d, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x19) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0x0, 0x0, 0x7115}, 0x100) r7 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, r7, &(0x7f00000000c0), 0x8000000eefffdef) 01:31:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe00603140920f442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) 01:31:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100400, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1081806) syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 01:31:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/d\x14\x80\x00\x00\x00\x00\xa3H\x00', 0x4000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409211442900fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000000c0)=""/154, &(0x7f0000000000)=0x9a) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:55 executing program 1: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r6) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r6, 0x1) recvmsg(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESDEC, @ANYRES16], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESDEC=r6], @ANYPTR, @ANYPTR64, @ANYRES32=r3, @ANYPTR64, @ANYRES16=0x0]]], 0x8}}, 0x0) r7 = dup(r0) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000040)={0x10, 0x20, 0x17}) ftruncate(0xffffffffffffffff, 0x1000002) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) 01:31:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x6a8414ab2fca951a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='sessionid\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000140)={0x3c, @local, 0x4e24, 0x0, 'rr\x00', 0x4, 0x5, 0x80}, 0x2c) r2 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100000000003}, 0xfffffdbb) io_setup(0x2, &(0x7f0000000340)=0x0) io_submit(r3, 0x1, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040), 0x354}]) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000240)='./control\x00', 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000180)='./file0\x00', 0x200) 01:31:55 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000540)=[{{r2, r3/1000+30000}, 0x1f, 0x800, 0x4000000}, {{0x0, 0x2710}, 0x5, 0x0, 0x8}, {{}, 0x16, 0xffffffff, 0xffffffffffffff17}, {{0x0, 0x7530}, 0x0, 0x6, 0x2}, {{r4, r5/1000+30000}, 0x15, 0x7ff, 0x8a08}, {{r6, r7/1000+30000}, 0x13, 0x1f, 0x100}, {{r8, r9/1000+10000}, 0x0, 0x100000001, 0x2}], 0xa8) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) ioctl$KDGETLED(r11, 0x4b31, &(0x7f0000000040)) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r12 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r12, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x2000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r14 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000000000)={r15}, 0x14) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) ioctl$EXT4_IOC_MIGRATE(r16, 0x6612) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffffe, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r16, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r13, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r15, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r17, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r15, 0x28, 0x6, [0x3, 0x4, 0xffff, 0x4, 0x5e5c, 0x7f]}, &(0x7f0000000140)=0x14) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210440400fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:55 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='\x12\xb5\xe61/am\xdb\xd4i#\x00', 0x0, 0x2002) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0xfffffffffffffffd, 0x3, 0x1, 0x1, 0x1}, 0x6, 0x2fbf, 0xfff}) 01:31:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x3becb1c63511d1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x105480) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$TIOCLINUX6(r6, 0x541c, &(0x7f0000000240)={0x6, 0x6}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000180)={0x9, [0x5, 0x0, 0x7, 0xff, 0xd3e, 0xeae, 0xd2b8, 0x1000, 0x9]}, &(0x7f0000000200)=0x16) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) 01:31:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) 01:31:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 01:31:55 executing program 5: 01:31:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210440600fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:55 executing program 5: 01:31:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x5b30c3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200, 0x24) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='com.apple.system.Security\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000100)=0x7) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000180)={0x1, 0x20, 0x200, @dev={[], 0xa}, 'eql\x00'}) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000140)={0xfffffffffffffffa, 0x1, 0x7, 0xfffffffffffffffe}, 0x6) 01:31:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) 01:31:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442b00fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@em0user\x00', 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0x8, &(0x7f0000000200)=0x1) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000080)={0x3, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000040)={0x9, 0x6, 0x9, 0x2000, 'syz0\x00', 0x2}) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:56 executing program 5: 01:31:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) 01:31:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) read$char_usb(r0, &(0x7f0000000340)=""/4096, 0x1000) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000040)={0x0, {0x6, 0x100000000}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:56 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/d\xe5v/u\x04i_ctrl\x00', 0x4ca82, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xa92909d0acb85f5f) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x40000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x100081, 0x220) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r3) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r2) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) pipe(&(0x7f0000000040)) r12 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x301204) ioctl$ASHMEM_GET_SIZE(r12, 0x40046f41, 0x760025) 01:31:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442c00fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:56 executing program 5: 01:31:56 executing program 0: 01:31:56 executing program 5: 01:31:56 executing program 0: 01:31:56 executing program 5: 01:31:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442f00fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:57 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)="024ee5f963bb518fd7c1931aa3da5ba4fed282c58eda8e0b52671f3f1d2121d66af220ba9b04a5541280daf323627b431a5b57bf99fc9f18f919ecc89f3d64391974"}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x100, 0x0) pipe2(&(0x7f0000000240), 0x88000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x612000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0xcb4640, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x20000, 0x0) timerfd_gettime(r4, &(0x7f0000000340)) ftruncate(r1, 0x1000000) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r5, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="9814199a24ea", 'gre0\x00'}}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r2) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x10004e25, @multicast1}, 0x10) r5 = dup(r1) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d40) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x4, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) unlinkat(r5, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:57 executing program 5: 01:31:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/4096) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x60) open_by_handle_at(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="ba000000bf000000912f97ab24f749c3a1f7ac3577fd1b63203fa4d040dad12afaaea3d2af47afb5adc27df3e619929beffef22344cd3632c6938c406982e7bc487b17298b217bdf6ac577b348a6c62c6d933b08f4efae2f20c70c810a1e3b295b59c00bd1198fc8d1a564a6f94d3b5fb7de41590631246d93c535f192bc0c09301dff30f88baa51e6267dea49b54b916a9427110cf4e5460aac5837a6458a9930cb7d387f779dcc008c4060fa212005b605fedb1ffbcfc129013452ca3e1004fbc360283c0a84a817bdc1"], 0x8800) 01:31:57 executing program 0: 01:31:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210443c00fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:57 executing program 5: 01:31:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffff9, 0x100) 01:31:57 executing program 0: 01:31:57 executing program 5: 01:31:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x74}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x9, 0x8, 0x1}) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442902fe0000000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:58 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:58 executing program 0: 01:31:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x420080, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x760025) 01:31:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0x3ff, [0x2, 0x7, 0x4, 0x80000001, 0x2, 0xfff, 0xe034, 0x3, 0x10001, 0x0, 0x7b8, 0x401, 0xffffffffffffffff, 0x3ff, 0xb00, 0xf4d7, 0x8, 0x0, 0x7, 0xc2aa, 0x4, 0x5, 0x3, 0xffffffffffffffe0, 0x69b3, 0x7, 0x73, 0xff, 0x8001, 0xfffffffffffffffa, 0x401, 0x6, 0x2, 0x5, 0x3, 0x19e0, 0x8000, 0xffffffffffff7fff, 0x4, 0x4b12, 0x7, 0x5, 0x0, 0x9, 0x6, 0x1000, 0xd939, 0xa3], 0x9}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:58 executing program 5: 01:31:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0200000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:58 executing program 0: 01:31:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/21) 01:31:58 executing program 5: 01:31:58 executing program 4: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x760025) 01:31:58 executing program 0: 01:31:58 executing program 5: 01:31:59 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8b) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x604000, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x161) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$CAPI_REGISTER(r7, 0x400c4301, &(0x7f0000000080)={0x100000000, 0x5, 0x1}) 01:31:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe003f000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:59 executing program 0: 01:31:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xd0}, 0x28, 0x2) 01:31:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10003, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:31:59 executing program 5: 01:31:59 executing program 0: 01:31:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0040000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:31:59 executing program 5: 01:31:59 executing program 4: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x185) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x20000, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x627ef5d351dacb15}, {r0, 0x5684}], 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x2}, 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/rev\x02}bi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x760025) 01:31:59 executing program 0: 01:31:59 executing program 5: 01:31:59 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffc01, 0x80500) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x768, 0x120, 0x408, 0x588, 0x298, 0x120, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d2, 0x3, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@local, @dev={0xfe, 0x80, [], 0x21}, [0xff, 0xff000000, 0x7f, 0xccb47df379c5fd1f], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'irlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x6, 0x6fe7, 0x3, 0x1}, 0x0, 0x118, 0x178, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0x0, 0xffffffff, 0xffffff00], 0x4e20, 0x4e22, 0x4e20, 0x4e21, 0x100, 0x9, 0x1, 0xae, 0x2}}}, {{@ipv6={@mcast2, @local, [0xffffff00, 0xffffffff, 0xe635563eee5b0da4, 0xff], [0xff000000, 0x96abed2276f24a10, 0xffffff00, 0xffffffff], 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0x4f3d, 0x9, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x2, 0x80000001, 0xffffffffffff0000, 0xfffffffffffffc00, 0x3, 0x100, 0x100}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d6, 0x800, 0x97a, 0xce7b912aa2404a0e}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @broadcast}, @ipv6=@mcast2, 0x12, 0x2, 0x7}}}, {{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x3c, 0x2, 0x5, 0x85e, 0x57, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, @remote, @rand_addr="f35e372a7a80ad08f12675c77087574c", [0xff0000ff, 0x0, 0xffffffff, 0xff], [0x0, 0x0, 0xff000000, 0xff000000], [0x0, 0xff0000ff, 0xff000000, 0xff000000], 0x1008, 0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast2, @rand_addr="0b79f4364e00a275821f299da619714d", [0xff000000, 0xffffffff, 0x808000ff, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth1_to_bridge\x00', 'gretap0\x00', {0xff}, {0x95c9e353b6e46391}, 0x0, 0xa00000, 0x4, 0xc}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr="64b321ac180833a2ea0d1765cc95850e", @ipv6=@ipv4={[], [], @empty}, 0x2b, 0x19, 0x10000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:31:59 executing program 0: 01:31:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000100000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='rl\x00', 0x1cb080, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x109282) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:32:00 executing program 5: 01:32:00 executing program 0: 01:32:00 executing program 5: 01:32:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x2, r6}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r9 = fcntl$dupfd(r8, 0x0, r3) ioctl$KVM_PPC_GET_PVINFO(r9, 0x4080aea1, &(0x7f0000000400)=""/41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r11, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@file={0xe1b194a2ee26d0dd, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)="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", 0x10f}], 0x1, &(0x7f0000000380), 0x0, 0x40080}, 0x40000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000200000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:00 executing program 0: 01:32:00 executing program 5: 01:32:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x46000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000300)=0x80, 0x81) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x3}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = semget(0x0, 0x3, 0x500) socket$inet6_sctp(0xa, 0x5, 0x84) semctl$GETPID(r5, 0x4, 0xb, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000100)=""/130) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x800000000000004, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffd6f) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x8004, 0x4) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x760025) socket$l2tp(0x18, 0x1, 0x1) 01:32:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000040)={0x6, 0x6}) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0xfbcb4f34ec0537d8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:00 executing program 0: 01:32:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000003f00000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:00 executing program 5: 01:32:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/de\x95\x04\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:32:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000001c0)=0x7) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x400}) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa1804}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000843) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:32:00 executing program 5: 01:32:01 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:01 executing program 5: 01:32:01 executing program 0: 01:32:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000004000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:01 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x17) 01:32:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x801, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200002, 0x0) 01:32:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 01:32:01 executing program 5: syz_open_pts(0xffffffffffffffff, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="c8", 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) fchmod(0xffffffffffffffff, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x100, 0x3, 0x2000}, 0x4) inotify_init1(0x80000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:32:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe7fffffff00000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000040)={0x40, 0x0, 0x5, {0x0, 0x1c9c380}, 0x101, 0x7ff}) r5 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r5, 0x1000000) r6 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/l\x00', 0x10000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) fsmount(0xffffffffffffffff, 0x0, 0x1f6) 01:32:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000001000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x6, 0xe30, 0x7, 0x100000000, 0x6, 0x7ff, 0x0, 0x10000, 0xffffffffffff8000, 0x81d5, 0x4, 0x4, 0x6}, {0x4, 0x7, 0x0, 0x100, 0x8c, 0x41e, 0x7f, 0xffffffffffffff5e, 0x7, 0x5, 0x34e, 0x3ff, 0x236}, {0x7fff, 0x0, 0x7f, 0x7fffffff, 0x2, 0x9, 0x6, 0x1, 0x5, 0x800, 0xfff, 0xfff, 0x1}], 0x1f}) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r3, 0x401) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x14201, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) 01:32:02 executing program 5: syz_open_pts(0xffffffffffffffff, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="c8", 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) fchmod(0xffffffffffffffff, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x100, 0x3, 0x2000}, 0x4) inotify_init1(0x80000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:32:02 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 01:32:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x100000001, 0x50313459, 0x0, @discrete={0x280, 0x8}}) 01:32:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000040)=""/92) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r3 = gettid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000180)={0x6, 0x8, 0x6}) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x6, 0x9, 0x10001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x12}, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000002000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r2, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8101008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x44b7fdf59f2a1622, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b94}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc000080) 01:32:02 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_notify(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 01:32:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000003f000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 575.735920][T23714] IPVS: Unknown mcast interface: syzkaller1 [ 575.766244][T23716] IPVS: Unknown mcast interface: syzkaller1 01:32:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x20011, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r5, 0x1000000) r6 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:cpu_device_t:s0\x00', 0x22) 01:32:02 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:02 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/13, 0xd, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x68}}) 01:32:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000040000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:02 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x292000, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:32:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:03 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000200)='\\vmnet0?\'`@{,vmnet1em0user\x00\xd412\x88t\xdaA\x0e}Q\xdb\xbe\x0e{i\xcb\xa6+\x96\xcf\xcb)t\x80\r\x9a^4\t\xa0o\xdb>\xc4%\x17U2a\x17\xa2p\x94V\xdd\xd7\xf7<\x9a\x15G~\x9a\xfb.X\'`3\r\xbb\xb0m\xa3\xd2\x91\x97\xac\x89\xbb\\\xbb@\x14=\xa79Q', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x9, 0x4532dad8}, {0x4, 0x6}, 0x7, 0x4, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000007fffffff000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:03 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000240)={0xffffffffffffffff, 0x1}) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) ftruncate(r2, 0x1000000) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'security.', '\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x7fffffff, 0x8}, {0x10001, 0x5}, 0x2e, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000ffffffff000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) close(r0) 01:32:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x240000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6612) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000026c0)={r5, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x7fffffff, 0x7ab, 0x1000}, &(0x7f0000000200)=0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000280)=0x100000000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x5, 0x9b4b, 0x7ff, {}, 0x80000000, 0x3}) 01:32:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900feffffffffffffffff000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/d\x14\x80\x00\x00\x00\x00\xa3H\x00', 0x4000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) 01:32:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) close(r0) 01:32:04 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getuid() r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}], 0x20) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2800, 0x132) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000240)={0x3, "d87f0eb6a1a5bb2244e53dc614820508ac9150b9cdb5696d96708a0007e3e6eb", 0x1000, 0x8, 0xfffffffffffffffe, 0x10, 0x1}) setsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f0000000140)="ccbce6f02b4d0e2431aeb7930fdde6804e99f4db3293082287aeb9235becd75b1f6efd3dd705827b5331384461f8a82c773ce0a9fa4bb718f1853d26bf99e99067953bb9f87fa95232fece06893647d65880c0bce1373cf23d4a768392f6a2331b7b3a77ca4f78aaeae055dd0cf27c5bfcd2cd76e3b4f30294cb6c", 0x7b) 01:32:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1f, @broadcast}, 0xc6) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x101080) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r5 = socket(0x10, 0x2, 0xc) write(r5, &(0x7f00000000c0)="1f0000000102ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x402) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) close(r0) 01:32:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0002000000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:04 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00003f0000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000040)='\x05\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 578.059515][T23827] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 01:32:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 578.110977][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 01:32:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000400000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:05 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x1008000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000001000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) [ 578.779243][T23827] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 578.788761][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 01:32:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1f, @broadcast}, 0xc6) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x101080) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r5 = socket(0x10, 0x2, 0xc) write(r5, &(0x7f00000000c0)="1f0000000102ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x402) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000002000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:06 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 579.210191][T23885] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.261933][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:32:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:06 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:06 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:06 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000003f000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:06 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8001, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000040000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:06 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:07 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe007fffffff000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:07 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x760025) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x1, "89"}, &(0x7f0000000180)=0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000040)={0x1, 0x1}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r2) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x169, "6040ccfd9a2940956039b030e3937e01845f630112a15d07d9047fc0e25ed7ea85d9cf6aa6bd363ece99fc1e60b768b4e24a7d7e1c731e2145f807006d2d47441698aa5baf63a7568d6ee1a036db7ff950d21600c8ff99a8b000be91a376"}, &(0x7f00000001c0)=0xffffff36) 01:32:07 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000010000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:07 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000, 0x2000) 01:32:07 executing program 1: getgid() r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3}) r4 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) read$eventfd(r6, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0xff, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1633, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x3}, 0x2, 0x0, 0x0, 0x7}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f0000000180)={0x81, 0x90, 0x2, 0x0, 0x2}) 01:32:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:08 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0xfffffffffffffff8, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:08 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x139) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000020000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 01:32:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000000000003f0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 01:32:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8001, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 01:32:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000400000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0x0, &(0x7f00000000c0)=0x9d3c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r5, 0x1) recvmsg(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x21, 0x1, 0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44001) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r7) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000003c0), 0x21b) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r7, 0x1) recvmsg(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r2, 0x3, &(0x7f0000000080)={0x3, 0x3, 0x9, 0x9, r8}) r9 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r9, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000400), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:09 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:09 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) getsockname(r0, &(0x7f0000000040)=@isdn, &(0x7f0000000140)=0x80) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e22, 0xffffffffffffff81, @mcast1, 0xffff}, r3}}, 0x38) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}}, 0x0, 0xffffffffffffffff, r3, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:09 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000007fffffff0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:09 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:09 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000ffffffff0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3295, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) write$capi20(r0, &(0x7f0000000040)={0x10, 0xbe2d, 0x83, 0xc1, 0x71}, 0x10) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x5, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00ffffffffffffffff0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000020000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x0, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x114602, 0x0) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000040)={'netdevsim0\x00', @ifru_map={0x8000, 0x7, 0x6, 0x1, 0x3, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000003f00000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x0, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x80000000, 0x82080) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 584.351400][T24123] vivid-002: kernel_thread() failed 01:32:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x0, @pix_mp={0x13, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000004000000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x6, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x20493859, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:11 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000340)={'bridge0\x00', 0x1b, 0x4}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r2) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) ftruncate(r1, 0x1000000) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r5, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:11 executing program 0 (fault-call:6 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000010000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x3, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) [ 585.166392][T24199] FAULT_INJECTION: forcing a failure. [ 585.166392][T24199] name failslab, interval 1, probability 0, space 0, times 0 [ 585.179794][T24199] CPU: 0 PID: 24199 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 585.189358][T24199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.199515][T24199] Call Trace: [ 585.202832][T24199] dump_stack+0x172/0x1f0 [ 585.207178][T24199] should_fail.cold+0xa/0x15 [ 585.207197][T24199] ? fault_create_debugfs_attr+0x180/0x180 [ 585.207218][T24199] ? ___might_sleep+0x163/0x280 [ 585.207235][T24199] __should_failslab+0x121/0x190 [ 585.207250][T24199] should_failslab+0x9/0x14 [ 585.207267][T24199] kmem_cache_alloc_trace+0x2d3/0x790 [ 585.237346][T24199] ? __kasan_check_read+0x11/0x20 [ 585.242678][T24199] alloc_pipe_info+0xb9/0x420 [ 585.247482][T24199] splice_direct_to_actor+0x76b/0x970 [ 585.252970][T24199] ? common_file_perm+0x238/0x720 [ 585.258026][T24199] ? generic_pipe_buf_nosteal+0x10/0x10 [ 585.258049][T24199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.258062][T24199] ? do_splice_to+0x180/0x180 [ 585.258081][T24199] ? rw_verify_area+0x126/0x360 [ 585.270033][T24199] do_splice_direct+0x1da/0x2a0 [ 585.270053][T24199] ? splice_direct_to_actor+0x970/0x970 [ 585.270075][T24199] ? rw_verify_area+0x126/0x360 [ 585.270090][T24199] do_sendfile+0x597/0xd00 [ 585.270119][T24199] ? do_compat_pwritev64+0x1c0/0x1c0 [ 585.304611][T24199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.310843][T24199] ? _copy_from_user+0x12c/0x1a0 [ 585.315775][T24199] __x64_sys_sendfile64+0x15a/0x220 [ 585.320993][T24199] ? __ia32_sys_sendfile+0x230/0x230 [ 585.326283][T24199] do_syscall_64+0xfa/0x760 [ 585.330793][T24199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.336757][T24199] RIP: 0033:0x4598e9 [ 585.340653][T24199] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.360247][T24199] RSP: 002b:00007f6d94360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 585.368657][T24199] RAX: ffffffffffffffda RBX: 00007f6d94360c90 RCX: 00000000004598e9 [ 585.376624][T24199] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 585.384587][T24199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 585.392546][T24199] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f6d943616d4 [ 585.400521][T24199] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000007 01:32:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x101000) ftruncate(r2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) sendto$ax25(r3, &(0x7f0000000140)="38ce9c445b5d61b4f5ce152f03d82385259905fd53ec25ae05fcc0e765c58c579c80defb6d725500d5a405c4ba196a9706d126e4edff1b8acf05f3b38113f9c8b28048af9a9519717d8271338a", 0x4d, 0x1, &(0x7f0000000200)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @null, @default]}, 0x48) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/anycast6\x00') ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 01:32:12 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000020000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x7, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:12 executing program 0 (fault-call:6 fault-nth:1): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 585.647084][T24214] FAULT_INJECTION: forcing a failure. [ 585.647084][T24214] name failslab, interval 1, probability 0, space 0, times 0 [ 585.684148][T24214] CPU: 0 PID: 24214 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 585.693296][T24214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.703358][T24214] Call Trace: [ 585.706681][T24214] dump_stack+0x172/0x1f0 [ 585.711049][T24214] should_fail.cold+0xa/0x15 [ 585.715768][T24214] ? fault_create_debugfs_attr+0x180/0x180 [ 585.721591][T24214] ? ___might_sleep+0x163/0x280 [ 585.726455][T24214] __should_failslab+0x121/0x190 [ 585.731585][T24214] should_failslab+0x9/0x14 [ 585.736112][T24214] __kmalloc+0x2e0/0x770 [ 585.740441][T24214] ? kmem_cache_alloc_trace+0x397/0x790 [ 585.746038][T24214] ? __kasan_check_read+0x11/0x20 [ 585.751078][T24214] ? alloc_pipe_info+0x199/0x420 [ 585.751094][T24214] alloc_pipe_info+0x199/0x420 [ 585.751116][T24214] splice_direct_to_actor+0x76b/0x970 [ 585.766483][T24214] ? common_file_perm+0x238/0x720 [ 585.766505][T24214] ? generic_pipe_buf_nosteal+0x10/0x10 [ 585.766532][T24214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.783537][T24214] ? do_splice_to+0x180/0x180 [ 585.788241][T24214] ? rw_verify_area+0x126/0x360 [ 585.793130][T24214] do_splice_direct+0x1da/0x2a0 [ 585.798010][T24214] ? splice_direct_to_actor+0x970/0x970 [ 585.803586][T24214] ? rw_verify_area+0x126/0x360 [ 585.808513][T24214] do_sendfile+0x597/0xd00 [ 585.812967][T24214] ? do_compat_pwritev64+0x1c0/0x1c0 [ 585.818281][T24214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.824728][T24214] ? _copy_from_user+0x12c/0x1a0 [ 585.829698][T24214] __x64_sys_sendfile64+0x15a/0x220 [ 585.835095][T24214] ? __ia32_sys_sendfile+0x230/0x230 [ 585.840399][T24214] ? do_syscall_64+0x26/0x760 01:32:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x80000001, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:12 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 585.845099][T24214] ? lockdep_hardirqs_on+0x418/0x5d0 [ 585.850577][T24214] ? trace_hardirqs_on+0x67/0x240 [ 585.855628][T24214] do_syscall_64+0xfa/0x760 [ 585.860163][T24214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.866073][T24214] RIP: 0033:0x4598e9 [ 585.870097][T24214] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.889704][T24214] RSP: 002b:00007f6d94360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 585.889717][T24214] RAX: ffffffffffffffda RBX: 00007f6d94360c90 RCX: 00000000004598e9 [ 585.889724][T24214] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 585.889731][T24214] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 585.889738][T24214] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f6d943616d4 [ 585.889745][T24214] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000007 01:32:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}, {0x0, 0xfffffffffffffffc}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:12 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000003f0000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:13 executing program 0 (fault-call:6 fault-nth:2): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 586.211974][T24242] FAULT_INJECTION: forcing a failure. [ 586.211974][T24242] name failslab, interval 1, probability 0, space 0, times 0 [ 586.227601][T24242] CPU: 1 PID: 24242 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 586.236744][T24242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.246958][T24242] Call Trace: [ 586.250270][T24242] dump_stack+0x172/0x1f0 [ 586.254633][T24242] should_fail.cold+0xa/0x15 [ 586.259274][T24242] ? fault_create_debugfs_attr+0x180/0x180 [ 586.265112][T24242] ? ___might_sleep+0x163/0x280 [ 586.269979][T24242] __should_failslab+0x121/0x190 [ 586.274914][T24242] should_failslab+0x9/0x14 [ 586.279424][T24242] kmem_cache_alloc_node_trace+0x274/0x750 [ 586.285407][T24242] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.290878][T24242] ? lockdep_hardirqs_on+0x418/0x5d0 [ 586.296162][T24242] ? retint_kernel+0x2b/0x2b [ 586.300747][T24242] __kmalloc_node+0x3d/0x70 [ 586.305241][T24242] kvmalloc_node+0x68/0x100 [ 586.309822][T24242] iov_iter_get_pages_alloc+0x862/0x12f0 [ 586.315480][T24242] ? aa_file_perm+0x40b/0xdd0 [ 586.320173][T24242] ? iov_iter_revert+0xaa0/0xaa0 [ 586.325199][T24242] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 586.330924][T24242] ? iov_iter_pipe+0xba/0x2f0 [ 586.336230][T24242] default_file_splice_read+0x199/0x8a0 [ 586.341797][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.348072][T24242] ? iter_file_splice_write+0xbe0/0xbe0 [ 586.353644][T24242] ? __kasan_check_read+0x11/0x20 [ 586.358713][T24242] ? __lock_acquire+0x16f2/0x4a00 [ 586.363746][T24242] ? rcu_read_unlock+0x16/0x60 [ 586.368524][T24242] ? aa_path_link+0x340/0x340 [ 586.373284][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.379539][T24242] ? fsnotify+0x80b/0xbc0 [ 586.383884][T24242] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.389350][T24242] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.394840][T24242] ? lockdep_hardirqs_on+0x418/0x5d0 [ 586.400554][T24242] ? retint_kernel+0x2b/0x2b [ 586.405153][T24242] ? trace_hardirqs_on_caller+0x6a/0x240 [ 586.410856][T24242] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.416328][T24242] ? __this_cpu_preempt_check+0x3a/0x210 [ 586.421966][T24242] ? retint_kernel+0x2b/0x2b [ 586.426699][T24242] ? do_splice_to+0xa4/0x180 [ 586.431313][T24242] ? iter_file_splice_write+0xbe0/0xbe0 [ 586.436862][T24242] do_splice_to+0x127/0x180 [ 586.441391][T24242] splice_direct_to_actor+0x2d2/0x970 [ 586.446787][T24242] ? generic_pipe_buf_nosteal+0x10/0x10 [ 586.452351][T24242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.458605][T24242] ? do_splice_to+0x180/0x180 [ 586.463327][T24242] ? rw_verify_area+0x126/0x360 [ 586.468191][T24242] do_splice_direct+0x1da/0x2a0 [ 586.473086][T24242] ? splice_direct_to_actor+0x970/0x970 [ 586.473109][T24242] ? rw_verify_area+0x126/0x360 [ 586.483499][T24242] do_sendfile+0x597/0xd00 [ 586.487950][T24242] ? do_compat_pwritev64+0x1c0/0x1c0 [ 586.493267][T24242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.499522][T24242] ? _copy_from_user+0x12c/0x1a0 [ 586.504479][T24242] __x64_sys_sendfile64+0x15a/0x220 01:32:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0xca, 0x3875}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00'}, &(0x7f00000003c0)=0x54) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5e118904bb757f338dbd91636c044d7200b6153c020dfb0ccd7c681e0babd406d924630bae488bffdca95f2da5b5286260a72e53d1c9247aa2f73814a6f00cd6ef8c", 0x42}], 0x1, &(0x7f0000000200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1f}, @op={0x18}], 0x48, 0x41}], 0x1, 0x74b830c534f08909) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000400)=0x15200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 586.509700][T24242] ? __ia32_sys_sendfile+0x230/0x230 [ 586.515003][T24242] ? do_syscall_64+0x26/0x760 [ 586.519698][T24242] ? lockdep_hardirqs_on+0x418/0x5d0 [ 586.524999][T24242] ? trace_hardirqs_on+0x67/0x240 [ 586.530067][T24242] do_syscall_64+0xfa/0x760 [ 586.534591][T24242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.540488][T24242] RIP: 0033:0x4598e9 01:32:13 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 586.544392][T24242] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.564101][T24242] RSP: 002b:00007f6d94360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.572503][T24242] RAX: ffffffffffffffda RBX: 00007f6d94360c90 RCX: 00000000004598e9 [ 586.580479][T24242] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 586.588459][T24242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 586.596423][T24242] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f6d943616d4 [ 586.604379][T24242] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000007 01:32:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000400000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:13 executing program 0 (fault-call:6 fault-nth:3): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}, {0x0, 0x3875}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:13 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 586.932244][T24260] FAULT_INJECTION: forcing a failure. [ 586.932244][T24260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.991907][T24260] CPU: 0 PID: 24260 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 587.001083][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.011237][T24260] Call Trace: [ 587.014551][T24260] dump_stack+0x172/0x1f0 [ 587.018921][T24260] should_fail.cold+0xa/0x15 [ 587.023535][T24260] ? fault_create_debugfs_attr+0x180/0x180 [ 587.029368][T24260] ? ___might_sleep+0x163/0x280 [ 587.034240][T24260] should_fail_alloc_page+0x50/0x60 [ 587.039451][T24260] __alloc_pages_nodemask+0x1a1/0x900 [ 587.044844][T24260] ? __alloc_pages_slowpath+0x2540/0x2540 [ 587.050599][T24260] ? retint_kernel+0x2b/0x2b [ 587.055213][T24260] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 587.061485][T24260] alloc_pages_current+0x107/0x210 [ 587.066624][T24260] push_pipe+0x3fc/0x7a0 [ 587.070898][T24260] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 587.076564][T24260] ? lockdep_hardirqs_on+0x418/0x5d0 [ 587.081860][T24260] ? retint_kernel+0x2b/0x2b [ 587.086477][T24260] ? iov_iter_revert+0xaa0/0xaa0 [ 587.091427][T24260] ? aa_file_perm+0x40b/0xdd0 [ 587.096109][T24260] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 587.101840][T24260] ? iov_iter_pipe+0xba/0x2f0 [ 587.106533][T24260] default_file_splice_read+0x199/0x8a0 [ 587.112087][T24260] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 587.117562][T24260] ? lockdep_hardirqs_on+0x418/0x5d0 [ 587.122868][T24260] ? iter_file_splice_write+0xbe0/0xbe0 [ 587.128448][T24260] ? __this_cpu_preempt_check+0x3a/0x210 [ 587.134099][T24260] ? retint_kernel+0x2b/0x2b [ 587.138718][T24260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.144977][T24260] ? fsnotify+0x80b/0xbc0 [ 587.149337][T24260] ? fsnotify+0xbc0/0xbc0 [ 587.153702][T24260] ? fsnotify_first_mark+0x210/0x210 [ 587.159049][T24260] ? security_file_permission+0x8f/0x380 [ 587.164732][T24260] ? __mutex_init+0xef/0x130 [ 587.169339][T24260] ? iter_file_splice_write+0xbe0/0xbe0 [ 587.174903][T24260] do_splice_to+0x127/0x180 [ 587.179431][T24260] splice_direct_to_actor+0x2d2/0x970 [ 587.184836][T24260] ? generic_pipe_buf_nosteal+0x10/0x10 [ 587.190409][T24260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.196778][T24260] ? do_splice_to+0x180/0x180 [ 587.201473][T24260] ? rw_verify_area+0x126/0x360 [ 587.206336][T24260] do_splice_direct+0x1da/0x2a0 [ 587.211197][T24260] ? splice_direct_to_actor+0x970/0x970 [ 587.216767][T24260] ? rw_verify_area+0x126/0x360 [ 587.221638][T24260] do_sendfile+0x597/0xd00 [ 587.226088][T24260] ? do_compat_pwritev64+0x1c0/0x1c0 [ 587.231504][T24260] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.237767][T24260] ? _copy_from_user+0x12c/0x1a0 01:32:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = semget(0x2, 0x3, 0x10) semctl$GETPID(r4, 0x4, 0xb, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) r8 = getgid() r9 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r10 = gettid() fcntl$setownex(r9, 0xf, &(0x7f0000000000)={0x2, r10}) getuid() getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001280)={r10, r11, r7}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r13, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000340)={{0x5, r6, r8, r13, r14, 0x8, 0x9}, 0x40000000000, 0x3c0c, 0xfffffffffffffffe}) r15 = dup(r3) ioctl$int_in(r15, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r15, 0x8048ae66, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r15, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0xff, 0x1, 0x100000000, 0xdef5, 0x0, 0x83f8, 0x40000, 0x10, 0xe01, 0x10000, 0x9, 0x100000000, 0x8000, 0x80000001, 0x3f, 0xfffffffffffeffff, 0xfffffffffffffffa, 0x4, 0x401, 0x7fffffff, 0x800, 0x3, 0x6, 0x1, 0x10001, 0xff, 0x3, 0x4, 0x8, 0x0, 0x7fff, 0xffffffff, 0x1, 0x703f, 0x101, 0x5, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x10}, 0x1000, 0x5e, 0x0, 0x14b30961ad793e0e, 0x40, 0x40, 0x800000006}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x8, 0x81}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}, {0x0, 0x81}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) [ 587.237787][T24260] __x64_sys_sendfile64+0x15a/0x220 [ 587.237805][T24260] ? __ia32_sys_sendfile+0x230/0x230 [ 587.253213][T24260] ? do_syscall_64+0xc0/0x760 [ 587.257913][T24260] do_syscall_64+0xfa/0x760 [ 587.262439][T24260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.268334][T24260] RIP: 0033:0x4598e9 [ 587.268349][T24260] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:32:14 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 587.268357][T24260] RSP: 002b:00007f6d94360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 587.268372][T24260] RAX: ffffffffffffffda RBX: 00007f6d94360c90 RCX: 00000000004598e9 [ 587.268379][T24260] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 587.268386][T24260] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 587.268393][T24260] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f6d943616d4 [ 587.268401][T24260] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000007 01:32:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00007fffffff0000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x8, 0xb5}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0xc000000000000000, 0xf000, 0xfffffffffffffbff, 0x2, 0x12}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:14 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:14 executing program 0 (fault-call:6 fault-nth:4): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}, {0x0, 0xb5}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000100ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:14 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 587.712035][T24296] FAULT_INJECTION: forcing a failure. [ 587.712035][T24296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.787096][T24296] CPU: 1 PID: 24296 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 587.796347][T24296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.806421][T24296] Call Trace: [ 587.809734][T24296] dump_stack+0x172/0x1f0 [ 587.814092][T24296] should_fail.cold+0xa/0x15 [ 587.818701][T24296] ? fault_create_debugfs_attr+0x180/0x180 [ 587.824619][T24296] ? ___might_sleep+0x163/0x280 [ 587.829482][T24296] should_fail_alloc_page+0x50/0x60 [ 587.829494][T24296] __alloc_pages_nodemask+0x1a1/0x900 [ 587.829511][T24296] ? retint_kernel+0x2b/0x2b [ 587.829527][T24296] ? __alloc_pages_slowpath+0x2540/0x2540 [ 587.829550][T24296] ? write_comp_data+0x68/0x70 [ 587.829571][T24296] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 587.829587][T24296] alloc_pages_current+0x107/0x210 [ 587.829604][T24296] push_pipe+0x3fc/0x7a0 [ 587.829625][T24296] iov_iter_get_pages_alloc+0x8c2/0x12f0 [ 587.829646][T24296] ? iov_iter_revert+0xaa0/0xaa0 [ 587.844774][T24296] ? aa_file_perm+0x40b/0xdd0 [ 587.844795][T24296] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 587.844810][T24296] ? iov_iter_pipe+0xba/0x2f0 [ 587.844832][T24296] default_file_splice_read+0x199/0x8a0 [ 587.844854][T24296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.855317][T24296] ? iter_file_splice_write+0xbe0/0xbe0 [ 587.855336][T24296] ? percpu_ref_put_many+0x94/0x190 [ 587.855356][T24296] ? aa_path_link+0x340/0x340 [ 587.855377][T24296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.855394][T24296] ? fsnotify+0x80b/0xbc0 [ 587.866712][T24296] ? fsnotify+0xbc0/0xbc0 [ 587.866729][T24296] ? fsnotify_first_mark+0x210/0x210 [ 587.866750][T24296] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 587.866764][T24296] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 587.866787][T24296] ? security_file_permission+0x8f/0x380 [ 587.876624][T24296] ? __mutex_init+0xef/0x130 [ 587.876642][T24296] ? iter_file_splice_write+0xbe0/0xbe0 [ 587.876660][T24296] do_splice_to+0x127/0x180 [ 587.876680][T24296] splice_direct_to_actor+0x2d2/0x970 [ 587.876698][T24296] ? generic_pipe_buf_nosteal+0x10/0x10 [ 587.876720][T24296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.886384][T24296] ? do_splice_to+0x180/0x180 [ 587.896732][T24296] ? rw_verify_area+0x126/0x360 [ 587.896752][T24296] do_splice_direct+0x1da/0x2a0 [ 587.896771][T24296] ? splice_direct_to_actor+0x970/0x970 [ 587.896795][T24296] ? rw_verify_area+0x126/0x360 [ 587.896814][T24296] do_sendfile+0x597/0xd00 [ 587.908568][T24296] ? do_compat_pwritev64+0x1c0/0x1c0 [ 587.919273][T24296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 01:32:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='\'\x00', &(0x7f0000000080)='./file0\x00', r2) r6 = dup(r3) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xf}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x29}, @in=@loopback, 0x4e21, 0xffffffffffffffff, 0x4e24, 0x8, 0xa, 0x20, 0x10, 0x2e, r10, r7}, {0x7, 0x3f, 0x9, 0x0, 0x101, 0x401, 0x3, 0x8000}, {0x0, 0x3, 0xed7, 0x9}, 0x0, 0x6e6bb8, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0x2b}, 0xb, @in=@multicast2, 0x3504, 0x2, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0xdf3}}, 0xe8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000140)) 01:32:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x6, 0x8}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) [ 587.919288][T24296] ? _copy_from_user+0x12c/0x1a0 [ 587.919308][T24296] __x64_sys_sendfile64+0x15a/0x220 [ 587.919325][T24296] ? __ia32_sys_sendfile+0x230/0x230 [ 587.919339][T24296] ? do_syscall_64+0x26/0x760 [ 587.919353][T24296] ? lockdep_hardirqs_on+0x418/0x5d0 [ 587.919367][T24296] ? trace_hardirqs_on+0x67/0x240 [ 587.919384][T24296] do_syscall_64+0xfa/0x760 [ 587.919406][T24296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.919416][T24296] RIP: 0033:0x4598e9 [ 587.919429][T24296] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.919441][T24296] RSP: 002b:00007f6d94360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 587.930313][T24296] RAX: ffffffffffffffda RBX: 00007f6d94360c90 RCX: 00000000004598e9 [ 587.930322][T24296] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 587.930330][T24296] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 587.930340][T24296] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f6d943616d4 [ 587.930348][T24296] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000007 01:32:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000200ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}, {0x0, 0x8}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x10000, 0x10001}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000003f00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x10001, 0x400203) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}, {0x0, 0x10001}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000004000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x9, 0x2}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}, {0x0, 0x2}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000007fffffff00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401, 0x7}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdef) 01:32:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000ffffffff00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r6 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="8ec41f21e3e480fb2de95de130a0a6540100ff00d4404291e352a850eb3afeb465458a30983c182bfd33260910fe61a97779bdc95aeecb7500"/72, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={r7}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r5, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r7, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r9, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r7, 0xca4f}, 0x8) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="89e429bd7000fbdbdf2501000000000000000b000000000c001473797ae200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x9, 0xfffffffffffffff7, 0x0, 0xffffffffffff2b47, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x81008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x15b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000ffffffffffffffff00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = syz_open_dev$swradio(&(0x7f0000000080)='\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x1, 0x2) ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 01:32:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x2, r4}) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x4, {{0x3, 0x200, 0x7, r4}}}, 0x28) r5 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r5, 0x1000000) r6 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r6, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18003, 0xeefffdef) 01:32:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000200000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x2100) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x80000000, 0x1, 0x7ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}], 0x0, 0x4, 0x4, 0x1, 0x3}}}) 01:32:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000003f000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r5 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r4, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r6, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r8, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6, 0x9}, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r2) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) r12 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x78c, 0x110000) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000040)={0xc, 0x0, 0x2, {0x2, 0xe79, 0x4, 0x9}}) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}], 0x0, 0x0, 0x4, 0x1, 0x3}}}) 01:32:17 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000040000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}], 0x0, 0x0, 0x0, 0x1, 0x3}}}) 01:32:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18004, 0xeefffdef) 01:32:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}], 0x0, 0x0, 0x0, 0x0, 0x3}}}) 01:32:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000100000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) close(r0) 01:32:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101002, 0x0) accept$alg(r2, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 01:32:18 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18003, 0xeefffdef) 01:32:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) close(r0) 01:32:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000200000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) close(r0) 01:32:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf1800d, 0xeefffdef) 01:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000003f00000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) close(r0) 01:32:19 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200}) ftruncate(r1, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/wwradio#\x00', 0x1, 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r5, 0x1) recvmsg(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000080)=0x4) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20120, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r4, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) close(r0) 01:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000004000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), 0x4) close(r0) 01:32:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000007fffffff00000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:19 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18003, 0xeefffdef) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18010, 0xeefffdef) 01:32:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000001ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:19 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7, 0x8000) 01:32:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0xc000000000000000, 0xf000, 0xfffffffffffffbff, 0x2, 0x12}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000002ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00'}, &(0x7f00000003c0)=0x54) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="5e118904bb757f338dbd91636c044d7200b6153c020dfb0ccd7c681e0babd406d924630bae488bffdca95f2da5b5286260a72e53d1c9247aa2f73814a6f00cd6ef8c", 0x42}], 0x1, &(0x7f0000000200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1f}, @op={0x18}], 0x48, 0x41}], 0x1, 0x74b830c534f08909) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000400)=0x15200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080), 0x4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000000000003fff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000340)={'bridge0\x00', 0x1b, 0x4}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r2) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) ftruncate(r1, 0x1000000) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r5, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:20 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:20 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x4800000000000000, 0x51181788bb4b2d26) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000340)) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x202, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000380), 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x6, 0x10, 0x3678ccf1, {r4, r5/1000+30000}, {0x0, 0x7530}, {0x1, 0x5, 0x0, 0x1}, 0x1, @can={{0x1, 0xfff, 0x6, 0x48}, 0x5, 0x1, 0x0, 0x0, "e55bdbb96c5fe025"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x200000c8) 01:32:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) sendto$ax25(r0, &(0x7f0000000200)="fec3041c1ec2e46cb8bbb3823bb9baa1f20882d5850bcf6035dc22b3f603253a5fdfbec05d382f68603fb7b9c79baae26495dae1639263e509bbd4f99f6bb25589d8e9d815396b1e8f6f7739f79ff986f3df476f7789030de040b060ba6e8e32b76076d09c83f54ea6ac1a679f9391e951929bc7136935b7c0777aace33539804fff202c4eccfdfb9ccfa83d4bd7511e874acf1a5d76f9fad01e9a1fed3f5908507e64df2c034cf8bebc929ddd68977b29e013ecbf8b4cb18e8eb2c60350a0b34db018ad47fd54e1184a8436e93c00501ab5b740b85b5cbbc3296326cf3efdec5af8ab0374c9b5f955dc7040bbe729f65e25c640a0003eac83f0fae4a69fc2ffd15faff084ed3a0fd7ea124cc394381dc13ab2f7aa031554b868f9502d6e91771bd1919230ec206ab04d51416a98ccc1adc6c6b36a9a958c2f0b44337921592cace775b3a6bbc2ea2849091a38f06faff302b4b2b198a0bb4224b6eee2b5f57cfa6c2b735478ff5c5b12146912b56b202a93317e1924aef5d6e289db139186dbb2a9b255bc1e019497d03c9f8d6bcefde97581e377e2ce9ab03ace07a7acce5fe451acf796cfea7aee653688b864486a80a6e620d551d5625c0e9c032765fa3c947a8cfc46b36af70782510a18c3bdc510b4e1989a1e95e3074c0d3675ba8ec7b8dd4d807ce4b6f886c11cbbb3ebd30195745843255055f998f03bb33ad22ef661263442eeecabefa940a79cd9a4c3035e8cd63b060db5930388b1b15ac6cc3f47e29f7c22506290cf446f981137d6ef2ebf995d0547e12d28d3725416511b89fc867584ed044830152491db5fc40d883dad0489dc72253fd3e715675d2a316d73f81fd37595045877f6a7f1a79c57e7847c42b07e24d835387ec60a6c37efcbffe9538eb7488d0f348e9b5077bd73eb708c8a16e71f030a4f6ccadc0b40c158d6d24e961ce3005e0a2873c5a7a132c23e2bc1248199dccaba9ec6f1f74697ffcbf67683a4cba07c0e77763b97b84f4bcf30429f657c6b2a6e812e344052430dc531e03064981a31b2af8a580dc6d8161287f7abf676de871621e00afa0df42380f9548447724913b52a8e191cd24e57d77512f4ce3a9d397d5b06abec795811b4773a1e395befcede88be9aed5b17e6f5ff2358d77e0b26ba326b3ed60f2431e8dac30e26ba40360a98132d3b404779aec3c716852bb0cc210f08387b22c3dfe8ed9d89761681fc29e633d9fb9548f2a725efc9d68aeabdc17146d460391473b9150f729d9f8f89828abf31a339f99d91c59cbd294dd5bd1a79c21571d1e920d2e63f31d1aa0a2c54588702cc7aefb55a8b85ff2fbd9f4283c117557b9d1d2d2f6a9f169d81f638ddcf07d8a66267c293fd758fa753c0765e975389cd1e9301f48185febe661002faab21bc9f0e4f2d82461458123332ca6b80b73105dc26bd67bf7f8e7ae1f0ccec4da9996f427774ca661a29d61dd4a622522eb57e160ee3d2647158a73832a4bcce661e6eaa3f68c69610d53cce3ef61bebbf34557c23cfc4437f9f3d8e7692e7d7ee1e2aaa10b9a5401ee85f7bb4d827464c4d006a37a99fe206b502311b5a0cc9ace1dc3e25226cbe29a4972caa8585db978ea0c8d58fd547a21219391bb9023109580c36294332537214b97ecdb75cf4dfd682bec2f623074a89c1727debe1ac5421da7f5927cdd76f1ca3f7e9de136abfe52dfee763ad7a5efa94331517382bb2bef2d285a2aa711a1e3a76b62eb6a3d97410962d66abe68c2cd83462f405fae8ca474009048d7f986d1ec1715f6fc4882cfc616626ffd0dd303b12923df3de465ed2379e65e929e4012757acab6bb23fa1e00642436b40e9bef47699e31d988ec56dce62de131404d7d41363a126ea02a670b1b70599a6c6756d5700f0a5a544ccfa2e933657bcee76151c168db4c8e1e82b1fce90b3f9c5655aa98f6a03b55f68204ec10e1eb2d6d4f0a06b99b51374995b3450da9aa7dd62ff86fa890e437685eab7aeca8ff89f7a90255fd5ec6e6fe0673068111ef66299cffab4d75070221b16c93871b9eb1ed0b5723f9efae9e4cf439e5e42156b61e63325f413c44743bb7b75f18e899d4434857ff1d7887f0012f807453eb8b9e4b8bdcaff39b976d57cae0a33bf2b47a4b57aaef27d6dc710599c3060dcebcdb06a1728eec5b8f6c754a7ec16c1b185cf0ceeda5515fe0a34c1fcf064cdcf883f82821d908a7a738be60347c8d540e0d09111b4edf87a70215be301cf56609913c23ee4165e4d48a6a2b5c0de3a4badffd8a8a0226b715cd649a921ebfaf5d74a695805e802db5e62512ba39398f7ce239b832f4fb1bc316ade7f2f329473900a7e0d224527671c31e2439b9d1670aa7c19313d7d1574cd77cb020e86730d0f98dc0807b847addb8d9a8a77ea0e513cdec11583d2dc1d9dbe22854d73d853bfa02001d1cc4b67a7cbc10e69c0ca013e0ff812ddab79ee5cd6e3835005c6d62baf5e6da039f30891d70c49224b78922acd9d368a825c2d984d573b710057c776d16628f799d329c2e9ead9f5582eb45aea54610106013078dbf4528e4fc33c0f80644004f18e40b1c9279481920f3feaa67af8394c472e53e79b7c31ad73bccc0da9c674a9f3f2633b689ced055dd6f8063184b0448522d575a3031ce6de0a29de3aeb3add154ab8bba9814787d423dad972c104b054b51aff43586ee6ffd9e08c17121c126c494bf7d8ace10d45a97768df9170c46c126ac2a294fba037bd3620e971312e22bab99972f99544de2ffc85adf81f946c108fc4b9b958089d0817a2396aa4eed6917d06de71465c928a2a9491c16d6a825edb4027f55e445b72dea00f7e0c67b9bd64e2c19a321b94bf76a53f84cd76266278723f3db1336a6ef4c49d97eb61d2cd50b4632173e2ba42e54686d9679694bd0e922d8837386d9915411d7a5515ca4973335669441dd860804405e331db790e40c3c22fdac04bc823a26444f87206be03d096a5b0f1d9bb60828757b8f117bb02bdd799fdc9f12b87631e597276fd7cea2a1c8f1add9864da35cc154050dc1f7f7ab79ae615575d635c5b90518e2ac74001038a204327e0aa729ecb00148ddc6ba6dbd97c386ddfbc39a6c4a7ce11b4b80d77637235ebe4bc0fc889939da07f91034294e5903ab67a65ddb3e12270ca72e0ef5c4df0ff6b2bb32569ba56ab07fc5b850da3dacf2295a8a1b40694d19e90be84c29374b406eef8d24dfb22dc863530e4cf21a529a35752ae463c152301ef12fcb627c085a64db6d9206ac77f708b7339b1944b367ae3064857a6b3fe3b89cfa197490239aca80d53fb25cf03272057b7a76e0af40410deb1a61d25e40be54d0de47b52527596c0d9eec655a09f0b5a0b07a608b84f8cc7aa7ff18b1bdaa5ed96cdf22b7d4c15dcc41f6074a67557de7daadfde19a7e43e76d007cf918de9a70e382cf5544104dd5594dd98bc7eafdc7e34389400f3ed53381275f407f018d443c8dfd90f65e5eebd56092df1e7295b11934a514015c3f7fb0367a8e8593b3a858a1bb9b4148fec26e26336d78bcab6385e434ccae0f842c5427b269ff6ffd408671ae983468b743a127872a63c6133527f62ca31eb26d769037c1edc951fa7297a1400d52529054bcddba925b2c5a8cb55bfc5c89c4987217e0f4059fc766ae5800e26d5600e75c7b5c12812da7cb0c5ffdba475174cb78c6062de8c6809e1f2eac203ca6aa94f627f1c43885c7d248abf17e5c1473a3358c4509922f0536f7c7ee9604a9d9613a012168649296cd275ce055fc4938d32561a342abd19a9ae47c1c8b83f9aebea22a8ac81ddd151abd7e9f978be78e468214e07e356c04f45822e251250617675abf0048caf0aadef6d4092d00496c8034830cc06a9db1145eb2b71e2b51a4b900c3c5444c868d3f3d46ca073171770ea7c78708efd188ccd4159a26b2c7452970ec65708030a9ddaae84a088c840803239e2e18a265f49d996c5b54eafeefbef61fca11d9e6d99623c0e0b4eb6508b06b82def4b739892b5051846be31f34f6ff0dbd4ba485558fc77885bde496b09b029ce4a93c7a298007258748faa63101f0487823e64c198eeb11490eca622bd57969f944044776e7adbb17f9c8c0efd1454c38bcf09ae648c2010ca20da2ea4df6b46c614c1d2f80d69bed13f0b6ca0e02d7be93852de716056b6ccbcbc4f799d903fce908cc31e5f8f523b4bed5439bd56e8a3a782621a5a4c2836de62dc2821f59c7c1f6754f744bc606b101c19738d23a8a4737b01ba8ef0ca098b899a59c161140be5d2b10fe22c0161f5b41bf5c67f5a102d0dacf50a0279eea25e1ac78baa83ba5ff91bdfe0a38d5eafedae2f3e89420fd27250bb5b6ce016f56372e5f6f2c9a58976daa81eed58c8bf62453cb2e81c63c6d63e4ecb134865109f2a3515b26b0274b0472a60639272df24d5e044c2a141f1d029d6ea80d422a67bd13b792280a65fd38469c268c5146511cf2708257148baf2091f3acf9a774739d5951f926304e4cc7f18490c2f37a081e9a36b952d6fd8ef3e82be0d4463465658242c408f5976a15bbf634b19b99626659fdc1cad8356ed0ae8a81ea637fd9228879281a782c598d6d196d93689817bf9efc8330b22c549d3276d12c1bf2fa3a94cc9a858d3628d24b00150b882482575857c690d95e8b6235ce7cb2579206d99841614873d67ed5cf17739278b3e03d590727bae106a6aa70a4c20365e6246b6b2776e5648b8ae8395a686dec2cc10ae03f232470d6df14acd7d8a8ecbe0d7d330b92a59ab60df630b8f24b5b39285f1c144db0974057f4d22d8e5041a3b1fa5071926a32c68501a026cb03623d19476c09d76c39e45cd6de6a5d17313cbb69dd6df3614bdbc5385be24531659a83b884585fb671d4c3a257b90d1670d800b8a99cc3ae0c0377b873ff41682d40eaa677729b4c2cdbe3739497178db0560b9e3bd357bb1edc7cd5b85c35a9d43c30c903cdc550d778b73fc62f2a7a35664b020d85a0ff920e49741e1902be400cb9c448a794492912540fe8506b71c753f979f1316bc379e22abd582eb3907706774a657daffb72fc0ca08b73ea06f05ee1a2bf6850ff8ce77be61ebc7ad8b467a7cb944d62013c9c4b96812857190694c67697064063e2cdf1f012cf97eec8380fccc9ab0133b87b80dd46d0d09135712ac4c7c6bc896686e215e2dc66643b408e94fe3905c35769eb80b756f4dc72c8644796cb3661b4d141f758bd4fe9a337611f24fbffb9adb93faa150d26db926f8d2709df7f1fddcce946585df2344463255ebcf5b6e7bd191605172c0c938284fdfe5e09aaa5b22a142a0fbb1368d411730e0ece2a7c36ce0d1ed96545ed1e57d99a1b0cf4059f2430b8c456f21de43d74d538b6e887fd20f2219ffefd58f2a5724c071ca089e0832810062d11f71b39ca5367b30c33f8e8b2d947ea1927105038ffc38d982817dc7969b9f90742af181e70af4299031bd174be6cffe886dbaea24c883ec2ef47556e9696a623ef4d88fc2ede6d9729b26e3037ce9f81ef80cf11a80e3ae3751a27415ff4ba63595515be73cbff81ad800d3152cab4dfcc4a6fabf9bc751e6a4ee24224eb2fb4e10943c35476b9ffa73893f5eedf21662c97a0b4a42ac7918a7fbbaf706317587214babea94b5790166035b1bb73e6be33d7f66d75d05f6ff9be321ab63be22f6ec0abcc69f82565e48a0ef0e2946cd254a58f7b406bf23f7647fbf659011ea6ab87a2005df27ab375da62d68871c17d72f5f4f62", 0x1000, 0x4000, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x59b}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) r3 = socket$inet(0x2, 0x7, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) write$UHID_CREATE(r4, &(0x7f0000001300)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001200)=""/247, 0xf7, 0x4, 0x4, 0x7, 0x3, 0x8}, 0x120) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r5, &(0x7f0000000480)=""/120, 0x78) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, r5) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 01:32:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000040ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:21 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x7c9, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xc271, 0x4) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x3f, "b5a58e343e3a092efbf00512b578f903c4a39ab63c2ca4fdea88c4a284322785", 0x0, 0x2, 0x6, 0x1, 0x3}) close(r0) 01:32:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000007fffffffff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000140)={0x7ff, 0x6, "f04b032d40814cf26315bb1cec4b423db6311a23b21f1860a72d5cce469be6e7", 0x4, 0xda4, 0x3f, 0xfffffffffffffffc, 0x9c}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 594.344289][T24666] FAULT_INJECTION: forcing a failure. [ 594.344289][T24666] name failslab, interval 1, probability 0, space 0, times 0 01:32:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x60000000}], 0x6) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 594.422480][T24666] CPU: 1 PID: 24666 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 594.431622][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.441696][T24666] Call Trace: [ 594.445001][T24666] dump_stack+0x172/0x1f0 [ 594.449347][T24666] should_fail.cold+0xa/0x15 [ 594.454072][T24666] ? fault_create_debugfs_attr+0x180/0x180 [ 594.459883][T24666] ? ___might_sleep+0x163/0x280 [ 594.464743][T24666] __should_failslab+0x121/0x190 [ 594.469691][T24666] should_failslab+0x9/0x14 [ 594.474202][T24666] __kmalloc+0x2e0/0x770 [ 594.478440][T24666] ? mark_held_locks+0xf0/0xf0 [ 594.483193][T24666] ? mark_lock+0xc2/0x1220 [ 594.487770][T24666] ? _parse_integer+0x190/0x190 [ 594.492622][T24666] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 594.498331][T24666] tomoyo_realpath_from_path+0xcd/0x7b0 [ 594.503860][T24666] ? tomoyo_path_number_perm+0x193/0x520 [ 594.509536][T24666] tomoyo_path_number_perm+0x1dd/0x520 [ 594.515030][T24666] ? tomoyo_path_number_perm+0x193/0x520 [ 594.520646][T24666] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 594.526440][T24666] ? __f_unlock_pos+0x19/0x20 [ 594.531127][T24666] ? __fget+0x384/0x560 [ 594.535291][T24666] ? ksys_dup3+0x3e0/0x3e0 [ 594.539713][T24666] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 594.546060][T24666] ? fput_many+0x12c/0x1a0 [ 594.550481][T24666] tomoyo_file_ioctl+0x23/0x30 [ 594.555245][T24666] security_file_ioctl+0x77/0xc0 [ 594.560177][T24666] ksys_ioctl+0x57/0xd0 [ 594.564327][T24666] __x64_sys_ioctl+0x73/0xb0 [ 594.568916][T24666] do_syscall_64+0xfa/0x760 [ 594.573422][T24666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.579315][T24666] RIP: 0033:0x4598e9 [ 594.583189][T24666] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.602785][T24666] RSP: 002b:00007f7683269c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.611199][T24666] RAX: ffffffffffffffda RBX: 00007f7683269c90 RCX: 00000000004598e9 [ 594.619163][T24666] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 594.627125][T24666] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 594.636498][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f768326a6d4 [ 594.644455][T24666] R13: 00000000004c49f8 R14: 00000000004d8da8 R15: 0000000000000004 [ 594.665085][T24666] ERROR: Out of memory at tomoyo_realpath_from_path. 01:32:21 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x873b, 0x202000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000080)="408ded109ec78f0e511e6a4933b0a4cbe8b47501237434c2fe307e0400889c1e4c17245c634a8e50923fb20994db95cc2afd6b22710d8f5ce7cf84aaca6dda1a20cabaff21955a57997b65d791d1", &(0x7f0000000180)=""/204}, 0x18) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000002c0)=0x7fff) sysfs$3(0x3) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280), 0x2) close(r0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x40000, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 01:32:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000000000ffffffffff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 594.801350][T24653] vivid-000: kernel_thread() failed [ 594.828477][T24679] FAULT_INJECTION: forcing a failure. [ 594.828477][T24679] name failslab, interval 1, probability 0, space 0, times 0 [ 594.903511][T24679] CPU: 1 PID: 24679 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 594.912661][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.922722][T24679] Call Trace: [ 594.926033][T24679] dump_stack+0x172/0x1f0 [ 594.930385][T24679] should_fail.cold+0xa/0x15 [ 594.934982][T24679] ? fault_create_debugfs_attr+0x180/0x180 [ 594.940786][T24679] ? ___might_sleep+0x163/0x280 [ 594.945622][T24679] __should_failslab+0x121/0x190 01:32:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x5}}, 0x18) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 594.950563][T24679] should_failslab+0x9/0x14 [ 594.955074][T24679] __kmalloc+0x2e0/0x770 [ 594.959318][T24679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.965556][T24679] ? d_absolute_path+0x11b/0x170 [ 594.970503][T24679] ? __d_path+0x140/0x140 [ 594.974847][T24679] ? tomoyo_encode2.part.0+0xf5/0x400 [ 594.980230][T24679] tomoyo_encode2.part.0+0xf5/0x400 [ 594.985440][T24679] tomoyo_encode+0x2b/0x50 [ 594.989862][T24679] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 594.995514][T24679] tomoyo_path_number_perm+0x1dd/0x520 [ 595.000966][T24679] ? tomoyo_path_number_perm+0x193/0x520 [ 595.006579][T24679] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 595.012367][T24679] ? __f_unlock_pos+0x19/0x20 [ 595.017074][T24679] ? __fget+0x384/0x560 [ 595.021227][T24679] ? ksys_dup3+0x3e0/0x3e0 [ 595.025629][T24679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.031865][T24679] ? fput_many+0x12c/0x1a0 [ 595.036326][T24679] tomoyo_file_ioctl+0x23/0x30 [ 595.041081][T24679] security_file_ioctl+0x77/0xc0 [ 595.046001][T24679] ksys_ioctl+0x57/0xd0 [ 595.050153][T24679] __x64_sys_ioctl+0x73/0xb0 [ 595.054738][T24679] do_syscall_64+0xfa/0x760 [ 595.059235][T24679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.065114][T24679] RIP: 0033:0x4598e9 [ 595.069001][T24679] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.088612][T24679] RSP: 002b:00007f7683269c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:32:22 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) [ 595.097026][T24679] RAX: ffffffffffffffda RBX: 00007f7683269c90 RCX: 00000000004598e9 [ 595.105000][T24679] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 595.113039][T24679] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.121062][T24679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f768326a6d4 [ 595.129030][T24679] R13: 00000000004c49f8 R14: 00000000004d8da8 R15: 0000000000000004 [ 595.143979][T24679] ERROR: Out of memory at tomoyo_realpath_from_path. 01:32:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:22 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:22 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x405, 0x0, 0x0, 0x0, 0x0, 0x400000041c1, 0x0, 0x0, 0x5ba7aedf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4176, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000ffffffffffffffffff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 595.329389][T24708] FAULT_INJECTION: forcing a failure. [ 595.329389][T24708] name failslab, interval 1, probability 0, space 0, times 0 [ 595.381367][T24708] CPU: 1 PID: 24708 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 595.390518][T24708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.400584][T24708] Call Trace: [ 595.403884][T24708] dump_stack+0x172/0x1f0 [ 595.408227][T24708] should_fail.cold+0xa/0x15 [ 595.412835][T24708] ? fault_create_debugfs_attr+0x180/0x180 [ 595.418660][T24708] ? ___might_sleep+0x163/0x280 [ 595.423529][T24708] __should_failslab+0x121/0x190 [ 595.428478][T24708] should_failslab+0x9/0x14 [ 595.432986][T24708] __kmalloc+0x2e0/0x770 [ 595.437241][T24708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.443481][T24708] ? d_absolute_path+0x11b/0x170 [ 595.448529][T24708] ? __d_path+0x140/0x140 [ 595.452860][T24708] ? tomoyo_encode2.part.0+0xf5/0x400 [ 595.458241][T24708] tomoyo_encode2.part.0+0xf5/0x400 [ 595.463431][T24708] tomoyo_encode+0x2b/0x50 [ 595.467839][T24708] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 595.473485][T24708] tomoyo_path_number_perm+0x1dd/0x520 [ 595.478935][T24708] ? tomoyo_path_number_perm+0x193/0x520 [ 595.484560][T24708] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 595.490353][T24708] ? __f_unlock_pos+0x19/0x20 [ 595.495037][T24708] ? __fget+0x384/0x560 [ 595.499191][T24708] ? ksys_dup3+0x3e0/0x3e0 [ 595.503603][T24708] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.509834][T24708] ? fput_many+0x12c/0x1a0 [ 595.514260][T24708] tomoyo_file_ioctl+0x23/0x30 [ 595.519018][T24708] security_file_ioctl+0x77/0xc0 [ 595.523964][T24708] ksys_ioctl+0x57/0xd0 [ 595.528103][T24708] __x64_sys_ioctl+0x73/0xb0 [ 595.532675][T24708] do_syscall_64+0xfa/0x760 [ 595.537180][T24708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.543061][T24708] RIP: 0033:0x4598e9 [ 595.546943][T24708] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.566553][T24708] RSP: 002b:00007f7683269c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:32:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x9ef}, 0x28, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) [ 595.574965][T24708] RAX: ffffffffffffffda RBX: 00007f7683269c90 RCX: 00000000004598e9 [ 595.582934][T24708] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 595.590887][T24708] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.598847][T24708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f768326a6d4 [ 595.606809][T24708] R13: 00000000004c49f8 R14: 00000000004d8da8 R15: 0000000000000004 [ 595.619424][T24708] ERROR: Out of memory at tomoyo_realpath_from_path. 01:32:22 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/autofs\x00', 0x105200, 0x0) close(r0) [ 595.796067][T24728] FAULT_INJECTION: forcing a failure. [ 595.796067][T24728] name failslab, interval 1, probability 0, space 0, times 0 [ 595.817918][T24728] CPU: 1 PID: 24728 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 595.827060][T24728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.837126][T24728] Call Trace: [ 595.840428][T24728] dump_stack+0x172/0x1f0 [ 595.844775][T24728] should_fail.cold+0xa/0x15 [ 595.849391][T24728] ? fault_create_debugfs_attr+0x180/0x180 [ 595.855231][T24728] ? ___might_sleep+0x163/0x280 [ 595.860083][T24728] __should_failslab+0x121/0x190 [ 595.865100][T24728] should_failslab+0x9/0x14 [ 595.869624][T24728] kmem_cache_alloc_node_trace+0x274/0x750 [ 595.875436][T24728] ? rwlock_bug.part.0+0x90/0x90 [ 595.880371][T24728] ? tomoyo_path_number_perm+0x214/0x520 [ 595.886027][T24728] __kmalloc_node+0x3d/0x70 [ 595.890530][T24728] kvmalloc_node+0x68/0x100 [ 595.895170][T24728] video_usercopy+0x454/0x1130 [ 595.899931][T24728] ? v4l_s_fmt+0xab0/0xab0 [ 595.904340][T24728] ? v4l_enumstd+0x70/0x70 [ 595.908740][T24728] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.914959][T24728] ? tomoyo_path_number_perm+0x263/0x520 [ 595.920591][T24728] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 595.926394][T24728] ? __f_unlock_pos+0x19/0x20 [ 595.931061][T24728] video_ioctl2+0x2d/0x35 [ 595.935381][T24728] v4l2_ioctl+0x1ac/0x230 [ 595.939706][T24728] ? v4l2_prio_init+0x30/0x30 [ 595.944382][T24728] do_vfs_ioctl+0xdb6/0x13e0 [ 595.948960][T24728] ? ioctl_preallocate+0x210/0x210 [ 595.954052][T24728] ? __fget+0x384/0x560 [ 595.958213][T24728] ? ksys_dup3+0x3e0/0x3e0 [ 595.962630][T24728] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.968921][T24728] ? fput_many+0x12c/0x1a0 [ 595.973364][T24728] ? tomoyo_file_ioctl+0x23/0x30 [ 595.978317][T24728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.984560][T24728] ? security_file_ioctl+0x8d/0xc0 [ 595.989722][T24728] ksys_ioctl+0xab/0xd0 [ 595.993859][T24728] __x64_sys_ioctl+0x73/0xb0 [ 595.998448][T24728] do_syscall_64+0xfa/0x760 [ 596.002962][T24728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.008842][T24728] RIP: 0033:0x4598e9 [ 596.012718][T24728] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.032377][T24728] RSP: 002b:00007f7683269c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.040782][T24728] RAX: ffffffffffffffda RBX: 00007f7683269c90 RCX: 00000000004598e9 [ 596.048747][T24728] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 596.056724][T24728] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.064691][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f768326a6d4 [ 596.072644][T24728] R13: 00000000004c49f8 R14: 00000000004d8da8 R15: 0000000000000004 01:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000002000000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:23 executing program 5 (fault-call:1 fault-nth:4): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0x2, 0x2, {0x0, 0x2, 0x6000, 0xae3c6ff3ef2b4a98, 0x80000000}}) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa100, 0x0) accept4$netrom(r4, &(0x7f0000000080)={{}, [@netrom, @bcast, @netrom, @null, @bcast, @null, @default, @default]}, &(0x7f0000000180)=0x48, 0x80400) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000240)='system*cpuset+\x00') r7 = dup(0xffffffffffffffff) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x40, 0x81, 0xef}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r2) [ 596.365389][T24717] vivid-002: kernel_thread() failed 01:32:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x2006) 01:32:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000003f0000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:23 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000080)) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000200)=""/136) 01:32:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x3a8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x2eb) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x1, {0x5}}, 0x18) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180)={0xfffffffffffffff9, 0x800, 0xffffffff, 0x2, 0x9}, 0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) recvfrom$inet6(r6, &(0x7f00000001c0)=""/129, 0x81, 0x1a060, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @local, 0x6}, 0x1c) 01:32:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/\x01\x04\x00\x00vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x54af0955c1093b37, 0x1, 0x4c0000000000000, 0x3, 0x4f6}, 0x4, 0x2}) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000140)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x1b, 0x1) 01:32:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000400000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:23 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) close(r0) 01:32:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x5, 0x100000000}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000200)="c821b657daf64f1510d53921dfeb363b2bf484125d8cb34572d7046e243f5d18a2721bb7b21870db00a5a522529b00372346f4ff899bd8292361c20d7b791dfc6f1b894674c49a34bd4929f9ed5f92326d32c4e0d775aaf90534e095212a77afa6e06105efb7b3c3fb8824e63471c052f95fa096ff974471f70e1e963fb749ef5ffedfa8d7e72dbdfdfcd4629343ea0de8f0f25df5e76c7ac53f2bb1b5d06fb70b43636ade85ade172ad299c9b37d7e360e9699c9c4ca6468ae60532199b80533b135d2b3be7ade062e9efe92a92153d7f27cba1d25a9777437605dc7c402de7353844f9c044202bc5226c0aebf1", {0x7fffffff, 0x1, 0x55595659, 0x8, 0x4, 0x852, 0xa, 0x7fffffff}}) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x10, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc08800, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r5 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14) rt_sigreturn() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r4, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r6, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r8, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0x7fffffff, @rand_addr="0753d7fa367b12b0af50009802d0c0e9", 0x100}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r9, @in={{0x2, 0x4e20, @multicast1}}, 0x3, 0xa006, 0x100000001, 0x9, 0x1}, &(0x7f0000000300)=0x98) 01:32:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000001000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:24 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6612) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000c285282b5663c963dd3a365f4e0b49cbd4d7056244aed9491e2accd782", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000026c0)={r3, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r3, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x6}, 0x8) r5 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r5, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x841}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(0xffffffffffffffff) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) renameat(r4, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000000)={0x3, @null, r6}) r7 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1ff, 0x240000) r8 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x28000) write$binfmt_misc(r8, &(0x7f0000000340)={'syz0', "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"}, 0x1004) close(r7) 01:32:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000002000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b6b, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), 0xfa) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) write$P9_RCLUNK(r4, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="346a0002ff090001000000001000c93c13685c63d1e3bd726aa71636ab01d3f6c0713edeaec87e20f37298bbe5eec07a45e6f6dd1ed6d4770cd6f4061cc048a6069cdb0c99beb969bfac23fa079cfc01a8bf7023e4f2331a34d449646ec6c8bfb6393f3743fdbc0e7b11a41331"], 0xe) sendfile(r2, r2, &(0x7f0000001000), 0x2000000000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000200)=@generic={0x0, 0x7, 0x10001}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x100, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x7a5514544c5cf651) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000003f000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4c01, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) fdatasync(r1) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:24 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:24 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3, r0}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) prctl$PR_SET_ENDIAN(0x14, 0x0) 01:32:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000040000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:25 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r4 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) pwrite64(r4, &(0x7f0000000340)="5640fbe760b71a5a6a5a4fb895f441ee19a5c813dc3187d57331025521d7431f6ffe4904543413b8c29ab11e1bcafd8a80c84b1f777f62ac01cbd014a234f592b6e41e292fa30211049e3a60b912f8b5a777da29929e42ac896e430c56ea305ec0862710f32d45c79104bb61dc98398607349d0c2b8b973c833200341027d8dfcfa33c189c305bd9d615eaf50cc9b77d997953644c4530c572cead2e9d98f646befc7cea6ac31f3bf41a560f2f2aa83b049a1dce313fd98a2c25b22d871aa8d81b89857b1902191eeff1413b03099ce24501f599d439c294ec0449382efb858883", 0xe1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000140)=0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8015}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x282083) 01:32:25 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xfffffffffffff000, 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x5ea73cb7fc4ed21e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000007fffffff000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/nullb0\x00'}, {0x20, '}'}, {0x20, 'mime_type'}, {0x20, '@^\\@vmnet0'}, {0x20, '/dev/nullb0\x00'}], 0xa, "76d156187971fe6c96036bea44ee0cc7473028450eacff42237fc940519c86ca93e9786c300a18811d2c7bbbb6905f7bb5e1af9d193a02306bb00b1675a181e5510e28565d0a2f6a22e4ba4ddb0a3ef4323a7c517b352b2c80e20d36b651d412353889aedcf8638ddffc31e63af2d21d926892bc4d804083ae700efc86cafc98d55afd441907bd09871fad81e973098f5fcea26d8c"}, 0xd1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x3, @local, 0x9}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x3ff}], 0x68) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r1) 01:32:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000020000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000003f00000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000007c0)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) rt_sigpending(&(0x7f0000000780), 0x8) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @loopback}, 0x0, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)="5514ac618ca8c97809ce625582cd7aff481e1c7777833ec67f8f2b32491d6c7b27baa40143e51c62833d3563fc3259c74f55f6812fca8034a5256478eabd6a96d66a133655864f6ec91dda96", 0x4c}], 0x1, &(0x7f00000003c0)=[{0xa0, 0x1, 0xf7e, "8a990ef20b79683902e29051679ee974824a9518b8a29246959012ab0fa9df26f1f48297b34d390c838ff4cd77893e77198b46e80f9f79e7ddc21d867b309ef6f7a7986e266affec87ba2b8e5d9a546c2ac7fb35fafa4a13ea0db1c3d3b74e4a07cf97e29e17bb74f68f2eff118f13dc07a8cef120b1dcc2b1e98c5af4e702568babf7e40b14f7d04b"}, {0x90, 0x104, 0x4, "e21ab30b541fa52a862d8a4f417f28a84aa5c59dcebc2ebc4cf3979d52a4617cdc3e9683aab048318038b6983ddb1985847e2dc27811293a1d0985ee382cf7fa2953d654456029d8395672e7218e3a292d98afd9fd6b79c9546ad1dbf99baaaf06d95ada2fce2880e8420e02668467444b14e57881113b1cc5a3"}, {0xc8, 0x112, 0x7, "e80ec864d84722339ba0c66d354155e4374bff2efc21e425a1fc5d3012988cd793128a6d9416ebac8781639bcf1f4754f846b97626ce0621b29fdb522745e7ab861cbd4161e9647e661540f1eaf64f181bd6ccd948a4dc2fe0fedee989dae568d2b4423d8e2f68de49e9467f3e05fb9bd30e792a689bd1d500c624f435b5ed088570e7f8b11cc4e2d2cb7d24dc0e0715c156e9765d1002013a6a78f03667404ccfb095d4707c56b6d15f1dbc98224241b20d37"}, {0x20, 0x282, 0x9, "856dee2690db6c8232"}, {0xa0, 0x10c, 0x4, "287a3ac3b12e8a752c9731770bdded9814acac08de25f6051a85bc66d797a189b6a5638434ff668c6a315def044f019b55ce1b57f98c886925b3aff7cd2a2ae8157d862fcefa8dbc8a37d61301cc34d422865c105e67f3077cacc22c1962f937b2f182657979c2043f6d8c96b174f12334168fab4cadce5ea1ad21ad69ac0ea800d2d800b1ab59a98d8895ae"}, {0x90, 0x0, 0x6, "769dd614f2ec61a80fb5176de0f7d42f2e8ede7ee378962b00a59839c8cca75f931a9fb4d98f409b76564c70310d99c6b31ed7591affcf07ad4a145e4c080a015b8f4d23b5435fdf94e5ff8f32bd7a2d0edc49ff05f39c999210b334a942c7e9393a77fa99bc53690eb32916102f57fc158aae18edfa172832c71778bcb9eb59"}], 0x348}, 0x40000) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) ioctl$TIOCNOTTY(r6, 0x5422) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x1bccce08, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, @in={0x2, 0x4e24, @empty}], 0x3c) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000080)) 01:32:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 599.095745][T24874] vivid-002: kernel_thread() failed 01:32:26 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000003c0)={0x8, 0x0, 0x0, 0x5, 0x59, 0x3}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c010000c0dfd3036b67a8b2f32da474b21f8d11fcade5bb7d0a9e79287a", @ANYRES16=r3, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x402c000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1204}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="d40000002cc1091ee188cd0daee9144663980bea4616c206262b248868837ea82a2bfa719285644b321b1929976d39e53122691d45887399cb97875542021251835ecd497e88f9598fdbc30a350e8c9d25b6e8f297895bf24a7e77f09aeb213cea241969f9e28f2f336b6ce86e6fec1a8e1bd8fb3e2d6bdb80bd800188ac175481e597807b5c9ee33d71526fc585b1171f4a90c3c315848a5f159c99b3f70db6cde40fd45bca7d87f4f85688b3f33392184caced4672fb0cab1eadce60fd2667b2ceeecf7c", @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf250500000008000600030000005c0001000c000700080000000500000008000800ff010000080009003b00000008000500ed0f0000080001000a00000014000300ffffffff000000000000000000000000080002006c000000080004004e220000080004004e2100002800020014000100ff0100000000000000000000000000010800040005000000080009000000000024000100080004000000000008000b007369700008000800ff010000080004004e24000008000500a90800000800060007000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008808}, 0x24000000) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @loopback}, 0xff}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r1) 01:32:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x54a1, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000004000000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:26 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) r4 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) ioctl$RTC_VL_CLR(r4, 0x7014) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) 01:32:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x6364, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fsetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)='wlan0\x00', 0x6, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000010000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:26 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) munlockall() ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8905, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3a) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000001180)=""/66, &(0x7f0000001200)=0x42) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendto$netrom(r3, &(0x7f0000000180)="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", 0x1000, 0x10, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) close(r0) 01:32:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8912, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x25008, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x25d, 0x8cb, 0x1000, 0x8, @tick=0x2, {0x7, 0x2}, {0x3, 0x8001}, @ext={0x2, &(0x7f0000000040)="e280"}}, {0x3, 0x9, 0x9, 0x26, @tick=0x4, {0x1, 0x1000}, {0x7fff, 0x4}, @raw8={"49153338fbfd3a7ced15ce04"}}, {0x2, 0x3, 0x9, 0x81, @tick=0x6, {0x1000, 0x6}, {0x6, 0x4}, @quote={{0x0, 0xe5}, 0x100}}, {0x401, 0x7ff, 0x800, 0x3f, @time={0x77359400}, {0x7, 0x4000000000000000}, {0x0, 0x7}, @control={0x0, 0x5, 0x3}}, {0x2, 0x44, 0x100000001, 0x5, @time={0x77359400}, {0x7, 0x75cb}, {0x0, 0x200}, @note={0x0, 0x2, 0x6a17a1de, 0x100000001, 0x9}}, {0x9, 0xdff, 0x3, 0xffffffff, @tick=0x7, {0x0, 0x101}, {0x6, 0xdd8}, @quote={{0x1, 0x10000}, 0x0, &(0x7f0000000080)={0x7f, 0x7, 0x1, 0x10001, @tick=0x3, {0x80000000, 0x10000}, {0x5, 0xffff}, @result={0x1f, 0x4}}}}, {0x8, 0x6, 0x2, 0x3ff, @tick=0xfffffffffffff337, {0x6e, 0xe4a4}, {0x9, 0x4}, @queue={0x4, {0x8, 0xffffffff}}}], 0x150) 01:32:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000020000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8933, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:26 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$vhci(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="03e8bebcd8c246527df3290dd79c095e71206ee7eadb4f59975c8953df85c05ef14fbd4f3b8f524b14d34050f564adcc4259719dbe157a65c9ee8a02f06e63e6d6a60e348c496689ec5c02bf0b08737bf8693ae21554fe8825eda8d36e94c8e4d81bdde120f0b67f70f12c56da15ae0bca7d8a9b25a1f385d2e16806a626fba58687de47bdbac6034970197f9adbd08939026a062ce32b9558154929944eeff87466dfe976a3bb2136358609fa8c8c235e23fda0ce63a04be936a8abedf204255427c4"], 0xc0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0x1d, 0xbc}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'rmd160\x00'}}, &(0x7f0000000440)="d06d702bdad49608f0345637c1ca22c6074197829905542f9ff9f6745c", &(0x7f0000000480)=""/188) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x151832, r6, 0x17) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000340)={{0x2, 0x4e20, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x8, {0x2, 0x4e23, @multicast1}, 'erspan0\x00'}) ftruncate(r1, 0x1000000) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='&\x00\x00y\xa5\x00\x00\x00l\x00', 0xc0000, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @mcast2}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) close(r0) 01:32:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20820800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, r4, 0xa1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79c63ec}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4350}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe000000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x140) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8946, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:27 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x3, [], &(0x7f0000000040)=0x9}) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'yam0\x00', 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x3ff) 01:32:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000000000003f0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4a5, 0x4, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8991, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r2) 01:32:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000400000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x89e2, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) close(r0) prctl$PR_GET_KEEPCAPS(0x7) 01:32:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xae01, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000007fffffff0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$isdn(0x22, 0x3, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r8 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000000)={r9}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r10, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r7, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)="ff73898ca7ff17a86de337ca3cd8ebc37d2b3435e4c2291255c95d015a70c66bd7e7bf17391cf0ef5da1e5b87656bb5bd678fa721723f4fdd31fa6797492c86b1962b9a33bc5d56844d5b3a9f8cfe0753be761b2a6d5c426ab80bebdec3821ee19ec476ea5aee3e3ea96d2039652", 0x6e}, {&(0x7f00000003c0)="f7ef58fc281f6090e9d5", 0xa}, {&(0x7f0000000540)="f7592beaf1057e72f18894921c0b148fb026c35db05ec77cf437190dc6cc9731409f94b2c3ffdfd28ee8b40f11e5acd9c1e7ed81662e3d2ef15900d7ea3167832348410a2a72ad43cef5", 0x4a}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r9, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r11, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000180)={r9, @in={{0x2, 0x4e22, @local}}, [0x9, 0xffff, 0x600000000, 0x30, 0x100000001, 0x7, 0xffffffff, 0x5, 0x1f, 0x7fffffff, 0x0, 0x80, 0x3f, 0xffffffffffffffff, 0x6]}, &(0x7f0000000100)=0x100) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78) 01:32:28 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000080)) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x400454ca, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x212340, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'veth0_to_bond\x00', @broadcast}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r5 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000140)) 01:32:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000200000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 01:32:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1634cfd6a405be7a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x101, 0x1c, [0x6, 0x968, 0x6, 0x9, 0x7f, 0xb1, 0x7]}) 01:32:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4004743b, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000003f000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='+dev/dcp\x00', 0x800, 0x0) getpeername$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0xfffffea9) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x800c271, 0xffffffffffffff6b) close(r0) 01:32:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x401070ca, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:29 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000080)=0x5) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6612) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000026c0)={r7, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r7, @in={{0x2, 0x4e23, @remote}}, 0x5f5, 0x4}, &(0x7f0000000040)=0x90) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000040000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x661dea3de5b7e085, 0x0) 01:32:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x20000) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000180)) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getuid() setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6612) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000026c0)={r5, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r8) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r6, 0x73418870260ae42b) recvmsg(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000440)={0x3, 0x1000, 0x0, 0x8}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={r5, 0x58, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x800004e24, 0x44bd, @ipv4={[], [], @multicast1}, 0x9}, @in6={0xa, 0x4e22, 0x1564, @mcast1, 0x4}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000240)=0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xffffffffffffff2d) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r9) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000200)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4080aea1, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x800454d2, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x73ee, 0x7}, 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x1, 0x10000016c) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r2) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000180)={0x6, 0x3}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x8d, "8c82e09ec7154b883f5504138ad04c007082b0f9a620bbd5c30477e532794135c03867648f63b5b5d3bb09c21c6d42ff02d3cff7ff286776ea11a7c26e340f8c14a5e474ce92f2e370becfc6622f1da119d45579289b4b1eca23f01c5b171d56902ba6a09809c35feeaafd47064df3aa5b8a6887e9cb938a2949cd7484542b25abe6f69dc1c5b77be6c005f507"}, &(0x7f0000000240)=0x95) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000400)={0x7fffffff, 0x2, 0x8dc, 0x3f, r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000001c0)={0x4f, "cdf59cdce5624005a48ae3cba8d521585862e8c3bb47281095bd94c43d0aeeff990eea5693a0da10c43ce224840042d01883fe0793315f8ac1c60c7c9720cf0d3a23f9d2361b266476ced0716277f5"}) close(r0) 01:32:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000100ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x80086301, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:29 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:30 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6612) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000026c0)={r6, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r6, 0xc8, "6ff51e76a8e5dc403f93f578926e93c25121eccf61aa0f4f227a20df0191a47b6fd290bca4749a6f74fd70cfccfdefd5853b92b61ed5e20f76498edc378e78c6f3359e207d1b37712c6c315b3c2a85cc3d388af0ba1d0f4fefc32e356bcca3a0ca1fbbbd2e516ab6fbcbcbfabfb5ab9c183436ec9b637499d693ce7bb98f831633cf99b54edffd8b9f2b969c8c270b050e72f81d3f46a7f1266ec7555726d940926a80c921e69a0d054423f9696a61abc92726c1990126ec253348b3e7fe3f9d2867a01fe13adc58"}, &(0x7f0000000040)=0xd0) ftruncate(r1, 0x1000000) socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r7, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000200ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0x8048ae66, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50c5e0b2af0e76fcf") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x180000) fdatasync(r2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) read(r4, &(0x7f0000367fe4)=""/91, 0x275) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) 01:32:30 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000180)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd3fc3d9eded85f75}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000080)={0x3, 0x8001, [0x7fff, 0x81, 0x8000, 0x1e6, 0x2]}) 01:32:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000003f00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:30 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x4, 0x4d2, 0xbea3, 0x7}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0106403, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000140)=@rc={0x1f, {0x6, 0x2, 0x7, 0x5, 0x10001, 0x2}, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="689661d2ac7f6cc9ebc09397f3a8e034c4b110e252c55274d095cc3877c73e1402b01e7e902742778f1b39d613b12a2ef7e039a1e76c22155169e92ff61bef471352b40f13db17f394c86b03258e52ef10f5879fe3c5f154a90cf1c63033cb6fc69e215392bba1bb497fed77977e4e124ce760ccf1f67f9a7f99f922ed45e71f678dbbd706bb44923369036380163b6366c4acf243a12e1b239a840e9ec99854f51f8a2b379cc658edbadcd7ca05fbfb930fcba21d980bb2724b95fb933e530a3b4ee5c27600f29d58d350f4883d2d3e279800f264f4ef2e7a0b3e42a29355482130cc23988ef197094224e3439a54d024bd39360af7051848e16f2abca4ec92d00db41b694a6af055f58b9cd5dd32a707eae361806f457b003d32a4113351bcafbb9a29409850b1963c580b61fb162e71671b42e94f119c966682b3fe0a21ac47665683b90fbcadfb453024b56fcd65757281bc18ee2a398ed83995151774299795412ec8cced38021c7bda28f9656a93a413bac677d866bc07dbd051932fa4f328b6406c73bdc95026615f8f0c6fdc4a5577a80e018d09cc754deef7ce77e6535cefadd4c2f1279ce96a83fdce72ff106b24b56d6f1c196af7c2028a8dfa4aa2075398c416d01284606c05a70bb70e8432d5d823cbd7229d47324f5b58155bf1d2c410d8d8ab1014516a70a69b892ebc77209631df9f40a1024decffa4e7573fedcd7c9517d4706505a3a29fb9018ca5a0e69c32b323ba3c1facbedc5542a718027544c931287d9e2b1f75160010cd019ec3f535cd75c3cea4a7d552a0631f4a06e8150390813ab4904565f5620703d1e70e0aa6530f495929c81d4a09aa35fcd7442d3c84b715fa226f2d3df64c38daa87794f41a41bdcece55f3a1670d681ab123a3e109ee6782f6deef827cc127852cca9dad8f880f323a55587b7e53832efe648b8325f421d23779727c49bd87dcdafbd272c5179a348daf9bb7c93d389e32bfb6710e2a6598576f5a80d8a0463102d3458f43b14fab7e825a4a8f2b1e9c3f0adc94675e0b8ba0aab36597bb7b1f9ec407b206f4ceab996008393eef7f4e47a35732f7388cfb7ed917f2fa9f7a660a90eb15a0ca47bcfb0037e0f3c33dda8b625c9c24507c8d8d1335fb0a946a4018f5d938b860a388dc6dc1096c4932fecec15c8427647f05f387eb6fa67188dc843cf30d09a8ca1b23bb0209e1f5d710850278541143643ee4c59dfb7cb0b120df39c59d8100b8532cc680608fb2fbf475d2b82c44ccd8fa26dab7eeb7967ed035f40cf2f2a585ce05a9ddfaa329088edbaf83ac693c8455625e0ac749e3c9f5b0bb7d79ae5f83fa0bcc8e89f172551c1e09c49f5ffe19b7af67d8941c34d1dcb1ec852d4975e66d7427c0edb07d936fe84340b84d0c02760ddd1167ba6c757314e818dd22712a80d88fa281dc7e0fd80e4b98c9a42d91b8151d5ed7ac3e00eb72fc10c74f11a284bd8064a4ec444182baa35502e5b34fa72900a84397024770af6385287446eec3c0dc6f8e1065853c0429cdb2e3c975f5f34c145d929a06a91e64f33b2467068252e0868f56fdb076aa01d10be2790ecfbfc55bbb0b6d9a78f622352b78cb8083eaa2a2f33d24c9b4962402f7c6ff9fe373a2dd81715cb39ab76a0885a2079b7da2fc2c5852d6e085b84bf89c732d5916136a9e3f01a7faef9ce655d6bcb296ad1e80a814717edfa03addf80230c459a669380a84d5294dfe94b3fddfe11dcce80da30840a2844e82ff55ce8f1cb1f7dc4c64aa3caed702bf3985f0cf415c3f3dcb66598fbb3d9b74d89f6b3ed1444362f94b0cec3f635aead3e1bd5ee13e621e68b0d42815e4dd33aa286e1ff1b5aaf9f317013c4533764456ff3298b3355fcd29834b386eb69e877a8cf8ed867fd28f6e7441064a8c8523000bdcd3a6b2740f55fc86524d12e84d4c7696eb74b062845b69d2812fd164bb07961672d529360ad0f7a64f7f484826da53be597cf4590d97209ead87a764e2a96f5dba586a877b5135ab49cba35a825b13ef2fe9220c8e048d6bd2c9dbb365c1ac5801453d487cd116748035d9b77ff2153a671a21f17b73bb7b25c4239fbfd9007b7903e817856dea999936d11dc2d04ce041abba17f3c2c592c0d6215484760b47c134a27ffc86295e4d65b765de6fbc32590cc5b2a19cd62da27384324b305618199d553e4e2f88d4fd5f958079f397811d5cfaf611864145f15ce6c08f1f3056b794d8231e21b405b1b9d8a25e8797b87fa5b6ab6dab3bea05a5e42ab26f92691a5eb1ffab1e10f61e845964936f99d58001376b8a2cb4d333914efd5b4a5d3de6fc16352005bf0ebfc570541e5e5c98fc2625d05f0a793a3e51c6b8f88a607b32a06bb819e906aeae130de3680c76214084cd5f7bc865923ee4d14d79e64e4f1396efa45f6e8b1dc2d07a515d6693b73a7b530d08422dd17feecf52aea12740b2329aa5dc1e16afb9498ed835e4dbf74178a2cc8a284a6c0bf6ea6bd52dd8d283494737b9efee1de497b7a60dcf6ea8bbee8db89367256960f460a602c4c593ef0ca373d02145ea9f2153246d29285849ddf6fba787390caa27ac93152df077623a29e304b58f82e876aa68c0e4eebf73698cb56f83cbf0b389bc98dbe47767f9dce4f377d304caa54240590252dbd13b5ea114f9f62afc3582df4338752cf8b6bf6356d33b01dce8176f81a884b87c2f9ba60f283806fc53f23cb5aa1e90f44c3185f2fae356b2a9f4f04d3384824d02b272fa268d2b0cf83b9831e474e84ac8f3f9ddb5774fb8e050cd1f9aef7d39c3c3f97400c9410c4c94353558f37c068d64b15ddeffe97c50c836f62d016081bda78ba73cfcbcc43660ae7181a541964fab001e1ebfd39437af516cc7e81c08bba556d53c475bc1e7c04a1c68b92870edf8370a8aa9dba59e3aacdf9917fe2cae10fd1ee78c9d6aafc2c013fe6da4a25b31f57c689121d3427b456f63610d32231d521da5c9474f5909cb2fdfcc2bb0f415e8883b99e219566bef9a089817d173bf8f868f4d00a73e2a758b89596af56e909cf04381ca285bca025836d0f64a55b1b575dc1580f238ced8fea1d9da701107bec430dc3db8b62c959b3c41d6109a02ddf29d35cd5b588e1fa3bdc5ed9cacb3b21d183784499152a02ba07e4a684bff5e8309694a824a2e4e2869f82d6335d9f91a79c0d701d2bce85494b48c792cb2341168583a27ce17812f808d7c93212860a59043aa6bd74344177df8c7821a1d0a7be68352117909fdca5216382f9fab4ab544c7641d926111a883fc7163eb4106404db77b5a946e8d5a81c158b15f48b5d93cfd3b56b43d9bf6f7d965e51afefe80a4b3fe2cca2de71a9c3c33907c6a550b0c94e62be710b0d8ff4e74e69f81cd7cef6003430db612f25fce2c06de17325fa8d437a0c8924ee2b4b2b1b4d3658c44777d8e754f085e1886274759847e94b92a6c976968e23798e38f994ed99dbd2d48fccdf14273c4717fb4a8d0ed7ff554c6a2ff739e98e722f5989728fa4dc7ab134334bacc7095d9a0cd760027ae5532be0a46339ab9aff6ac21745cfedce9215280bc2bf40e71927224a9d8abb2a42ef5be0be41cbf65b4b302db7e4593228633bc50a3a66f75298b66438f7514fac0f2363c3262462898bacf4ffbf3981f4a7f86d4b0b2c7976a9cff03fec79d9ee5403634cc22cb64ba5be1421559ebeff2d6f8c171b763ae1d9b3870b4901b1c1c40784735dc1b99ae03b844ef36d24091536855ceec312d199227be62dfd78c5826cb06a17eba96ab095efada16dc3519eb453fe66389a54d5059540de6c8e2f4d69951d0f19477c179935a6a76d69c398271bcf172331216640f408d64c225f8c72a15245c310dcd0997861c8f7c0685a1c6493e9d1324717b608d05b9973d0b2dde6b9084cfc9cca99717ccb2dd2432483ffd7e0272b850cf87918564bca11afe8f38735789aaaed4493544da88a54263c31a63723b62227aa09e8732f7b03bbeb705e1f5469b15a8d6ce8e8fd497042a3db98761b06f9290e73385d5ecb2990a5687a66d9a1c2b1f287930b1fcaf073e7b5e03e3a3fae547d874633eb9908035816398b5fb7a2c1662ba8bd29b9602a09389c03fd9e6ebc43be8e39a80888458b786e730fddab015038baaa3e617d90fa1259a100b14176c620f5a22ccb57117269bf424fe809c26b53e6f0be44986a8d4c61bfdd8af14fead23d6d5cbe2a8ce699da302230c1165d9f5df0f323e1559ca6d23db6e246d9b369d6433c1dbae5ad96611d0ecf6d9232d14616b45dbb588bb53ba98e2e74ff4f1f09b4b46964e9ee0a865613a0a9be068d56a2221eae916cb817ae61cfa2a637d1922c4d0dc6be46336b8fc5a5e58bb11c999d5faa3c47ef271d1518b203ce21fd7f63de407550f7071534010a61cb305433161bf0e0519c7827bb5df2d8f50c80124e3562ba4c5495f7bc24858ade72356baf76140c43c85240a082a25069259f2309fcd5b8939ddc5ec076871a0bb1437dc7cbaca070b2c6838afc86876b01802534742cb570f446d486675c570f9ae78694512be8c6ad9985257d31b1bd5976ace8a270189fff009a2379787b2cd439d59a9155d3511233889d52f3c9e38233bd5b69b8a64e05f6cebdd721a2ecb9610b44169dbc7f499c0c99b75394732783afa294d3ab14ed98c454f10a461e24e5c6671e78019c05bd11b9973506faa20f63a2c4819b2132bf0deacf4ea04c1e99aa89eca557e322ea2d4cb20cbd9b9491682301205d1a2ea83f6a01a57cad3f9eb89d462174f950cee74c5f86176a3458ba8ee02da0c95513bda055f8e02d8860ddbac88988f67dfacd2b7256bd24d85ab89b2a89cfe7c42661a51a340cddc61e8810436d185c7f264279c77fa0288ee9a0dc82f53d55e92d3d5d3cbf4879f2949b34ff6490ad36e4851ec605a0d486e12b622d693f40dce724e4ed1ff317e90223c69212aa11c88b1497c1e824ceeb52738da319ab5ec970b6887afdf52a2c4cedfbccd74990606fa7cf6f1898690daf03380f7daf3ee908ee5c81b1260fc70e746df72d3e28515f58a1efe25a30f06253132548f4e835dfed33ea584b649a000056c6b5e737c814ecb4cd061853a5f4ecd6a7a79b058994072c1c2f9ef06ceaa81c70cc78e8cf6a51cd9886a4cbbc39536d06bb0b6303d724faecf9441de79b0aec9d9ecf0d816cc22f7ff89f17ff1a8d1ac89f47df29d97a82c157e26e3171f8083556c1bf1ee14b8a571e022edb35826660c8ce1f53945a4374293ad07cc20fcccd6346d9de00d88b5005a4450a04d2c097a9a0f5332e90b9a440e41309e280917639bd07931d87a7874d8928b71c0c209c5ab637ee275b8b1eebf3e612692a4f2a539a5e254cfbb30ef26906aa4171521882584de744f61f2bc618335094335463e8345cc86e3e5b9e337e8f7673f726ee0fcd3d28fb72d21a5b1f2e7ac60ce468f89a172bbe7d3037b43bdda8576b6a0f6d03fd3e86d2c3e66fe2c1b4b138f3746416d4a1963dbe8fb092b6741c8d4cf02bd1668193bf42c7ee94c9a182a071d5184711101590bc3ff3f3f62d4b3dcf6e38c001cc9f47916e1044bdb199a479b020827ab957263c9f8ee3770fa994f9388270f0574e5b5d3fd3bb31cd83d2c887d5c22ede4ad0a9d99b936f292740fffa6e3c9bfd9ba12e8430233cb5d7cfab4a20901ef0004a03005165cc7dc28dab1b4621713e04b2a1eb842b4f373f2c5f8db4a7256e309112fabf0472dfc335ad3467b9737b52aa2862476c5", 0x1000}, {&(0x7f0000002200)="670c6b92f8f226c63bc24cc9a9f147c0660cda3290133ed532b7b815b6781aa4a8939882185b83d9344ba4f2a0a80ee43a00e04576387d246e83e3cde681a86432841590d745ce65641dc7ed8f070c7f938611392ffed8fe", 0x58}, {&(0x7f0000002280)="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", 0xfb}], 0x4, &(0x7f0000002380)=[{0xf8, 0x103, 0xd12b, "beb70f2ee3536ddbc1f5884376b7d3e38bc4ffa44409a4b38e90ede44e12c3b5e4d812f5058f0e56197a1519942af1ef97d3a849a4828abdb91e4a0382fc7a24c7f12e2fee4f35ceee4b6319717fcc429fbd3d268ae30fa2b82c5e1caa468eb96bf75a1a713d6c647f372175ecb485d405119317bd0f9cbfbbca2a8cd0ca9212ea7229a3e79cf40c36ef34572dd5c8ebdc6beed7b2f708a67721d62ea7aa2459a625da0dfa4c89885ef8a615d173f233582623a6143524e2019504eba86ae6307c6266962c55d670f4018c2bbebe8c0d16d806e9443e1319fed589b8b252e404e2"}, {0x30, 0x10a, 0x3, "5ad0bddef5abbf7ad56f2dece400caf14da38c9512d0f1a4ea293c6958b1"}, {0x80, 0x88, 0x5, "25e45b6e1183558e0a5bd23bac17d669f144ed1889ed8e71325a8690e72467bcdfdb873872889d90a6f0daf85753b59a95d8ab8f0a514030843380d47950beec8a358a9fbd7635ee485d9ddd709b920f601fdda359ff14d9fe24785663511d3f10a3519f4684c88c777e6d1f1a164f89"}, {0x100, 0xff, 0x0, "91b69a4610351198edb6706e924a4b0b337f59a91aa837ce29a917b40f5b0aba070a58b58058b5a5aaefcac647e43dd1b1ffede46b9958293aa9520a853e24e848f18f61311292919f3c331c251f5b7fc4e525ffb2d6e218ad89ad72d05a46f85eee6c45362f8f09665f48f9c78ed27348021cd54ea1e49cd535cc46e2716c33ce68c77250c132e47255ba307bf64bb15c57fed9b905bbc50c944abff1948a0b56a3773639e14c450b28cb61cdc7f75b258fc93d83112f186620f6f943472a153c6e27af7435e5b871f6d1d0234a888aea6293305fedcfdea26561b2ff7864ff308068359b375469c49132e9ec"}, {0xd0, 0x111, 0x33f1, "c19ae121a16f5db7edbf982e7ce125f3a20f8062d967b57d8b753f2361cebba5bbd1acbccad8751f17e741331bdecb6143132b055048c076500f9ac9f2120e6f02e7bcd0f2568604ff78825668c5f9641c35110fee7b5adb018bd5f92e85ac7323507d4c3048afc290ed8a88da215401cf48fe02f01db794911f4429db93eebd409fdc6046667b5b43f9f5b619c0b837614acd1ad619fee42ad8e7ee88bbe24abbbca7b5093e6a6ed6e0a34af9d925931f48aa46ddef5a85e4"}, {0x38, 0x119, 0x4, "98b4391b3a88b758805d044a20c0eb91eab7aa4e3e19535e5e2122c9a8207029e4f3ce757509a185"}, {0x48, 0x108, 0x7, "3add983f9e8d7c42824d7fc05a1f53aea0d053a2f943edcbd8232f565240d2fb9ac6b06d885471d90ceb7733d393b3e3aee0053c78ff"}], 0x3f8}, 0x14000004) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 01:32:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000004000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xfffffffffffffd0e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl(r1, 0x1000008913, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:31 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000080)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000040)=0x2861380b) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000200)={{0x1, @name="5d4d7977ca3150f95494f002ba28ca3f4b7f14bc467fbbfb23258e6fca68fbd2"}, "b0b6186238b406636e54468f135ed5acaea7a8785eaade348e824c21d76e5250", 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5822, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x6}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x428100) 01:32:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x280, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000280)={0x10000, 0x200, 0x0, 0x1, 0x8, 0x8}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r3, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xe8, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc387}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x68000000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffff01}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xec9b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x1308e5e1435b5e0c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc018aa3f, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000007fffffff00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 604.453199][T25237] IPVS: Unknown mcast interface: syzkaller1 01:32:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x30000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x1, 0x80000001, 0x6}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 604.928439][T25222] vivid-000: kernel_thread() failed 01:32:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000002000000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x591800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x7fff, 0x38}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000007c0)={r5, 0x20}, 0x8) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000180)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)="53502b6bf1d72a98f66653b26992edc60f0ec285a0cf890738a89b93c47aec22b7b2b82f874e7d65c6fb06b50e2ba766592608e227b83658af319b60ac9c26a528e3d570e9d4574252f2047800862c15246733cd6f950f5b97cc0d9cf030f94a44a8c6c906f29ee8da3e2db712b257d6b73b3850fd59582901fde75d3ea71fd4df8e8e294a87992ea6eb85d9ce1b7356c9a5f71f2c154cc0f8431f02f7528124f0b5e67e0c9e8f32f9dd52b236cf1738cc7a76cb93ee61e3fae9889f7ee22330d73fe908fbc10782017ae683941c9acce85b14dae33b6b18292c8ccbe27fc67d97a0f360") clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000900)={{r6, r7/1000+30000}, 0x16, 0x40, 0x2ee3a49b}, 0x18) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000980)={0x7, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}, {}]}) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000600)=""/225, &(0x7f0000000700)=0xe1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x6, 0x140a09e5, 0x1, 0x9, 0x3}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000580)={r9, 0x100}, 0xffffffffffffffe9) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000300)={r8, &(0x7f0000000480)=""/112}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000000)={r8, 0x2}) close(r0) 01:32:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:31 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:31 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000080)=0x1c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xfffffffffffffff9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r5, 0x400}, &(0x7f0000000240)=0x8) r6 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r6, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback, 0xfffffffffffffffc}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100), 0x5, 0x7, 0x2}) 01:32:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020aa00, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe00000000000000003f0000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:32 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x44040, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x21, 0x37, 0x1, {0x0, 0x1000, 0x101, r2, 0x3, 'syz'}}, 0x21) r3 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r3) 01:32:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000400000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:32 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x88004, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000000340)={0xa5, 0x8}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, &(0x7f0000000100)=0xc) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000001c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0xffffff28) close(r0) 01:32:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0305615, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 605.857713][T25278] vivid-004: kernel_thread() failed 01:32:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = accept4(r3, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000140)=0x80, 0x40400) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000180)=0x2, 0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x82280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r4, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7e1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x4) 01:32:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000001ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:32 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02ef40"], 0x3) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4e0c, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000500)='/dev/radio#\x00', 0x0, 0x2) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r8) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x342}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r9}, {0x8, 0x1, r3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xcf6d2ef52e4f362e}, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) quotactl(0x6, &(0x7f0000000040)='./file0\x00', r10, &(0x7f0000000300)="5555355695374a704f2a4ace3faba881e4e3799a28cb7d20c5711e1cfed7c366dab2d5a130dc847fbc5be76f6bf8c073270086f6599b4f89daad1b03f3406e6fed0887184814ff8a3f7da728fbb8441666006c27f176a331ed5f8973d88564b6566391b7dd89240ea6c0c7b91200f94f34237dc9e79c6f72ea439746c61ab1c52e3b5113d3b47b615e6134cdf98c02428c8a967b46d02b691b8d8e3225386fc442a9f9ea004845f7c137078059b4223719") ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r11 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xffffffff, 0x40000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000480)={'NETMAP\x00'}, &(0x7f00000004c0)=0x1e) 01:32:32 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x3, 0x4) prctl$PR_GET_FP_MODE(0x2e) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r7, r8/1000+10000}}) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000140)=0xe668, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0x653b, 0x3, 0x60, 0x3, 0x10, 0x7fff, 0x3fd7, 0x5, 0x6, 0x401, 0x8, 0x1000000000000}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 606.014944][T25318] IPVS: Unknown mcast interface: syzkaller1 01:32:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x701000) recvfrom$inet6(r3, &(0x7f0000000140)=""/17, 0x11, 0x40, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r2, &(0x7f0000000480)=""/120, 0x78) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="0a14e3dbe564cf5808cb45feb3d2a101da9098c898232968c1ff305e8a866c974d28db27f880e3832097ec96493d88af40cfc09f75d5519459f6cc1b0c8fa55b371b2a8d744d3fda85d799ee91acda1eea08a0db5b256bfa32fc0884a0095d1781757a0b7768f0c0eb3aa25e67ae8e1361775a2f2db154337359de36d5e502f613ab3a24faa32aa67be13598645aea47727fead9f483d01013c0e219f3c3e49231c21ab959270b7379ea29fbfd364ce829ffa06b4e86b14e474a9b36694f4800a59bb3b4141506eb49d6dcebd87c0ec946e5c6398a44f62bb3d4f9495aa8598468a22e24e46b7306dd70f8", 0xeb, r2) keyctl$update(0x2, r3, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x100) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000002ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) wait4(r3, 0x0, 0x2, 0x0) close(r0) 01:32:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585604, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000000000003fff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:33 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x9, 0x0}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:33 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2001, 0x0) ftruncate(r0, 0x7f) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000040ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="1108000d5e0bcff679f070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40800, 0x0) write$P9_RRENAMEAT(r4, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r3) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000001c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r6 = eventfd2(0x5, 0x80001) fallocate(r6, 0x40, 0xfffffffffffffffe, 0x973f) close(r0) 01:32:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:33 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x8e23}, r3, 0x0, 0xffffffffffffffff, 0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="f5000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r4}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x80) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000180)=0x9ca) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x11c, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20048090}, 0x40) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x1, 0x9, 0x87e, 0xfffffffffffffffa}, {0x5, 0x3, 0x2, 0xc8}, {0xfffffffffffffff8, 0x8, 0xffff, 0x4bb}, {0x3, 0x1, 0x9, 0x2000000}, {0x1a47, 0x7, 0x0, 0x7}, {0x1ff, 0x2, 0x5, 0x100000001}]}) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000000100)=0x753, 0x4) ioctl$EXT4_IOC_MIGRATE(r5, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r2, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r4, @ANYBLOB="20000000000000008400000008000000103020d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r12, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8200, 0x5, 0x0, r4}, 0x10) close(r0) 01:32:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000007fffffffff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0cc5616, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000002c0)=0x30b) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x82, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r9 = dup(r6) ioctl$int_in(r9, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r9, 0x8048ae66, 0x0) write$binfmt_elf32(r9, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x400000000000000, 0x8001, 0x6, 0x4, 0x229b31b34426d909, 0x3, 0x1, 0x13e, 0x38, 0x10f, 0x3, 0x8, 0x20, 0x2, 0x3, 0x6, 0x40}, [{0x70000000, 0x6c00, 0x1, 0x7fff, 0x5, 0x199300000000, 0xffffffffffffff80, 0x1}], "2bebb3484c059811671683869adc4c02369fc146e30397d2bd2caada6129a121c2f1f056e1bdf83925241c61bdba5d726ed196a2483699f48155232b4b23eb8fc23e", [[], [], []]}, 0x39a) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180), 0x0) r10 = getpgid(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r10, 0x5, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) time(&(0x7f0000000000)) fcntl$setflags(r1, 0x2, 0x1) close(r0) 01:32:34 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000040)={0x3ff, 0x4, 0x7f, 0xce4059f0668a7d90, 0x4}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = fcntl$dupfd(r1, 0x0, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f00000000c0)={r7}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000020000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:34 executing program 0: pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x3, 0x2, 0xcc, 0x4, 0x9, 0x7f, 0x64}, &(0x7f0000000080)={0x3, 0x4, 0x20, 0x3f, 0x0, 0x8f6, 0x5, 0x80000000}, &(0x7f0000000140)={0x400, 0x3, 0x7, 0xffffffffb15fe7a4, 0x20, 0x40, 0x5}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={0x2}, 0x8}) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x1a1580) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) recvmsg(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/154, 0x9a}], 0x4, &(0x7f0000002400)=""/245, 0xf5}, 0x160) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r2) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000002540)='/dev/usbmon#\x00', 0x4, 0x8000) setsockopt$inet_tcp_int(r7, 0x6, 0x927c11faa1c6dcc2, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r6) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000000100)=@rose) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='^-)\x00', 0x0, r5) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000003f00ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:34 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xcf0d6c94, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:35 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) close(r0) 01:32:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x2, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000004000ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:35 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:35 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x254000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0xab, 0x2008, 0x3c8b, 0x1, 0x9, 0x80, 0x6, 0x20]}) close(r0) 01:32:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000200ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:35 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r2, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:35 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2f571021, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x3, r2}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x4c273, 0xfffffffffffffe64) close(r0) 01:32:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = userfaultfd(0xb8a69024e23427b6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000140)=""/118) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r4, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe000000000000000000003fff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7, 0x9, 0x3}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x400002) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@mcast2}}, 0xfffffffffffffffd) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000040ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x98000, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) r5 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r6 = fcntl$getown(r5, 0x9) ptrace$pokeuser(0x6, r6, 0x7fe, 0x2) r7 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r8 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x2, r6}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r9 = syz_open_procfs(r6, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r8, r9, &(0x7f00000000c0)=0x202, 0x8) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r12 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r12, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c00060002000000000000000c00020007000000000100000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="aebaa78e", @ANYRES16=r10, @ANYBLOB="000128bd7000fedbdf25030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xd96d8c4122e68d74}, 0x40000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r10, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2800c000}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)=""/183, 0xb7) write$P9_RMKNOD(r2, &(0x7f0000000140)={0x14, 0x13, 0x1, {0xd8, 0x3, 0x6}}, 0x14) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r13, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r13) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r13, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r13, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r13, 0x1) recvmsg(r13, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) sendfile(0xffffffffffffffff, r13, &(0x7f00000000c0)=0xf18002, 0xeefffdef) 01:32:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x8}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:36 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) syz_open_procfs(r3, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x8, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000002ff0200000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x300, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) 01:32:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x500, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0300000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x600, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x700, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0400000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xe0000000, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x2000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff1000000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) getsockname$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40002, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:37 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0111010000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:37 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = geteuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)=0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x1, r5}, {0x2, 0x0, r7}, {0x2, 0x4, r9}], {0x4, 0x3}, [{0x8, 0x4, r10}], {0x10, 0xa}, {0x20, 0x2}}, 0x44, 0x3) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:37 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xff00, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:38 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000fed000/0x4000)=nil, 0x5000) shmdt(r3) shmdt(r3) close(r0) 01:32:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:38 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x9c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20020881}, 0x80000) ioctl$EXT4_IOC_MIGRATE(r4, 0x6612) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7}, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000026c0)={r7, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r7, 0x1}, &(0x7f0000000080)=0x8) 01:32:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ffffffff3f00000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x2000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) membarrier(0x8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(0xffffffffffffffff) 01:32:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0202000000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:38 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x1}) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r4, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1c, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x101, 0x248401) 01:32:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffa) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x220500, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000200)={0x96, &(0x7f0000000800)="c882068e37a4029b9162a89c45d2ec3abb8c03787c748634118a2f82b8c7b723ead79fb2e0b8b0fe57d16280f7e5a6680dc56d21d8a70c51e9bfb75fac0acbdc2ae20fbd95eef9cf70e5e8b9314ff48d9477fd429a91f2948566660c4fc4cd58a8b66108d86ddcd10fa8b79493d6c37a080454d130de5e024a385dbcffd7c9b117bd8a767e064ba758ff3f6df57271876a955e123f19"}) r4 = dup(r2) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x591800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x7fff, 0x38}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000007c0)={r6, 0x20}, 0x8) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000180)) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000380)="53502b6bf1d72a98f66653b26992edc60f0ec285a0cf890738a89b93c47aec22b7b2b82f874e7d65c6fb06b50e2ba766592608e227b83658af319b60ac9c26a528e3d570e9d4574252f2047800862c15246733cd6f950f5b97cc0d9cf030f94a44a8c6c906f29ee8da3e2db712b257d6b73b3850fd59582901fde75d3ea71fd4df8e8e294a87992ea6eb85d9ce1b7356c9a5f71f2c154cc0f8431f02f7528124f0b5e67e0c9e8f32f9dd52b236cf1738cc7a76cb93ee61e3fae9889f7ee22330d73fe908fbc10782017ae683941c9acce85b14dae33b6b18292c8ccbe27fc67d97a0f360") clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) write$input_event(r5, &(0x7f0000000900)={{r7, r8/1000+30000}, 0x16, 0x40, 0x2ee3a49b}, 0x18) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000980)={0x7, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}, {}]}) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000600)=""/225, &(0x7f0000000700)=0xe1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x6, 0x140a09e5, 0x1, 0x9, 0x3}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000580)={r10, 0x100}, 0xffffffffffffffe9) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000240)={0x1, r5, 0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000300)={r9, &(0x7f0000000480)=""/112}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000000)={r9, &(0x7f0000000080)=""/89}) close(r0) 01:32:38 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0x6) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000080)={0x4, 0x8, [0x689a, 0x1]}) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x62a, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02003f0000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:38 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:38 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r4, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfc000000]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800002}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c4, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x104, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88df}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4eade165}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x705a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4133}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x73900810}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200400000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:39 executing program 4: pause() r0 = socket$inet6(0xa, 0x5, 0x80000001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e20, @broadcast}, 'vlan0\x00'}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x800, 0x0) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6612) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000026c0)={r7, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e23, @loopback}}, 0x100000000, 0x8000, 0x1f, 0xa7, 0x89}, 0x98) close(r0) 01:32:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x6000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 612.313669][T25651] vivid-000: kernel_thread() failed 01:32:39 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:39 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x3, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) dup2(r0, r2) 01:32:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000001000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:39 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x8000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000002000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:39 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x20000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x40000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x5fb5, &(0x7f0000000040)="11dcad0d5e0000e47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) times(&(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) close(r0) 01:32:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfecaedfe, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000003f000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:40 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x1f41) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000340)={0x2, 0x0, 0x2080, {0x5000, 0x1000, 0x1}, [], "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", "980eb54f8407d3f006f070c2f42d8d4eff575f8e55878d7b3961a0491f852f0c6c436fdc8de075ea32391073b93e6368d23fbaca5da2416188c278f59fb92e4924847efea87aeb8d2642fe38258edfff59e832f4ad2abbb347a48a53b2d42a1271c847271c355e1d6eaf77d4cd48fd4fc615352454b5670bee9b8aaa44814124bca83c4179a383523848bbcd2a00c06b76f8baa0ce021936c8cd2eefe01657e00c67973eed4c76efdef188b136b54153e7b054ebc7600de1f4539b3721c4fcf8c7333e4f8303985efc1fd630b3937ef5f821032608bcff8bbc3f77b1b02ad17e1b42dbc2ae4007d8e4c1a9d6b93076b594177a4812a1b40849ce2a72da8be2ad870abe3dee3964a4b0105b708ea03840b2c8b8b47fc65024c7c2496c375d59682db02cd652c6887bbe5211350cce0adcbc87377f7830bd6317e8df65240c990454c19e023394832690a13dcce6010d3462e44f7a4178985918d308ddd3c7b3cb5512ca979cd90df013ef6cbb6410a8875009f493e7c298afe2e77c51b15808ded63b1bb19779134b44dcae96bd1c193a6728666251fbc5702a254f37ab7211d61aa3004c603ead6a163868f21c4200d905fc3f2902f862a9976cf90b4c96de40bbf133a1c9e55b73c97f8e078a8dd4c8d338f7771ac96d92ce886042032d2cb2bf7f2b09b6015a0ec2f0810fe304ac9a8771f5f302d956f30d843f32a76f2221a8f0e231012a5f53319e6f2b011e9a2cab8bd2a6131921290aed6fe9bdb6ed78ce200f0125e20410d00bb192eab0aadaeebd43b380e2d13e1fcd103e47c0c4d903ad0b0541bee1832910ff26e621d02e3f1dcc449047318c39159fdf3eb0dda6421733d38114699f4a8896fc0a6015b322b5a0201e2a554751b3398c41941c14cbbfe682745cadcae8f25b369015c0db1e91067853d9da9c0ebcd14e50eb653ebfe6260edc3d89ebb3285e74c68b716bbf4c97ae771cf1f40ea08c1ac7475471a24c245c5e6115d0580f41c7534ae6a455f116885630f1490e5429d288ccb191700f79701b9e1ca6da89558b43c498a3ab791ff90cd03723dcf1df62253ae4b8011fafe33f79c835e4953575e8e9c30ad1fddcaa910f0c53a7ccd691f0fe16625fe9da55a9ac771e49e11e227c3cace599d14717bd246ec14f47bc61bdbc2ec61cc97ff2f488bab5ffc8a3c96fbd7659f07df51da7f6c72a515382d9b1c9ce5738fd5aba7ef4ece19c95852d8077f0906efaccb299d139306293f4cd5a64c942644f8cf3e7a7a5139962e8465b4b71d99b023f5eb331bfc4b2c7587f422a1a159cbc94390dd7ff6b3d4b88b84f5d20c8230e6068877597a1bebb05323b7a56c77d8ae43487840c04e47b5cf12b6fcea47b96e00b1ff711f8b8d560f31f5c28bcdf70a3ad026a7c3626bdebe7eea20619b9d772cb6ce00f46cb2ac101fd549ab346acc68037b93a4d5c45e4fba42514eab54148b2dba2225fa1dea0810cc6297ffb059ea590ec82d6d335d3611ec5c6e99a5761f51f173e45a6a9232150a9ee6c64c4dbfd18183331b1d0579f666956b63812bd82cb4b7bc83a3ffb4b3991de1e4ad3aff748064af8c9c17f83f84cf57ae20aa36ed49f1df6ce0b7e42e46df0bfb17dfcf1959ee20a3c1325df7e053eb700a8020cd5b8e5c5e0aaa1300620247587a608801d94b4e8d4b2ee3ea113585932680124813e643980dc2bc7682d0362e056e1e17cf014e12a54b80f93512d797c1eab025eddcb5db81d089d864783996462195468ccc1f9ea140bf109df37474ee6e9f686dd068bf2f80b3bd254e1c5ffe0e64e08f5ccc26f2a9f878c6fc05a00de5a3e9c29ae49eee860ab42f897b636da9ea714f0737b6ee3a5f4cbf36a7f71118ef5d58236912afc085c2dcf5637f913c87c933cbd19cffc3467e5e94c9ae583bee8cd4f3b0f2290327cda4a2258d5e7f5fcfc93805f5d6fb5e435fd9bb01c267e4106545af1c4a0526f810fae5463bd604d1a4bbe67d8ed2efa7f90528991f894b91603603152f975e29badcc5b81809af7948f6ee58d847410ed7c7a15f37dc4af77e4be063c578ca007706a91578d237f196d1f00ce060aab3f59bd725dad097bb3b62177751e2212735c9492c8091192a904f065c0a16463e9f7211f9ca3c1cc85289174c142934e1b23f4d403e21ff6ce864844d77bb05b98f31c04d35f486dc39f978b7d745cdb01e3363de4e412e2c2a82e93c54ada8b1a119d124c17e5bd9e25e82b50cfd6c451f4b04af014bf905f52b85d4e15e3f7ff33e8100e6cde355da283894490fd31bc809c9246ac03f6a1089c9854068cd7a1ee34d7991e9ad19e1ff3223efef1c1aa5f7c96b5bbcb0f2e892a2d279801713548f948abc4b2806459916510fb0e7ea36dfcb64e6df6acd249341102a999db4cf163046d3e0266420f57a82489d0ada1cc9bc4e9a2750cb6c1dd88c8bbda85ecfcea4d9bfbfbf71f3764ee0c4c49ef182f186eef599f9f1a95c05d8a9afda118b214943acb16e64b8fc9d10f61d16a840d6da9c6a424de613a106527af813461737d273c0406a03432bfc921024318889c56fd5bb541c55ed881c1e03583ef2c2f5cb35b8fe771bf8e06e6b1cee760d39eab0275666b4e8a601ed33f5cc0dfa4883bfe30d90a456d66ddab555a50b64be0f9e8f1f4bae72a2a64f2b4e3188aa17cda9d71a0ea9f2050528b81b4b2cfd038a46bb138c5aec2119a6205e3f3bdb415dfeea843b0a192651b55292ff42e408c7ff35c744145bd227260614463f468f008e23a0d55c4fc0d5957a2342573266e4a39ec633bfff9c26fb518d96d06ab3c7cb8ea67e47c6110b3a2281b2a5c959b514d0afc481543dd9e3cdb3b47c87f6bb9a9678413b5a37ac71256007d994fe40d9615d5c2aa76b97457568472bfe7fe2360278a549cc320414cbcb35088a4cc04d4b46084200e54338ecf2cad8371460fb3aa6431f57b804ff6e00348f74cc1c225bd6d229175b0f4c7881532d158f4be47a63633f1761bd5e016d3aadb03995c3fe050d0d8cbb6aab42705b5e9a968e5cd4839627e86c2b6e26710be1a6dd7b9bf828482ad484ee317d55b3fcce16d4bf18297f564d4aa3deb31dca844b26460cf0267d40ff34ac26a6a0d26f462299c8d5f3ba99fe840abb6f15e761f7404834e8f3d04f6cc99a6ae5e2f0cc7615b46e4578634da1eede4adb40a9b186628d23173b57712068c3eda3a298c5fa58fe3fd12bc7dad6fd442ae38eabaeb367c2107165d31e5ffd88cc9bcefdbca8bb3e97bd5183b05bace6299e02732138b83c20c039c970a5ea0a8090797383c858e19a0d0af58a357724240db191bc6b28ab5fe0d49034c8b3cddda91dea461a96156fcf0d3546d213f810429597fb6dfc69e84eccb14942c8781fc8f97070c4f80c09944e7f1050b8b80ccb76a1e3e86ff6540838affc05608839618eb00eb4aca8b154f6af6423c4f3594e6bdbb136b8d70c157eee580c4f37e7d47f2bb4ccdee6390a90dad4176d1f617c4bbc472d45c128d821a22d4ca4c335f9a09e9179b4fa2f4ef79dd24461f24276310fedc0006c6f81c1d35f7ecb850ea91a7c7502d45167b752456097721e268092f58cdeb2583407154023ad0e134a3f39bde22db3e5f5b156c212df3582f2efee1620239d5ecd5df101735c72a847b734e2ddd4f073bac74e718f91b1142d02432f4cdd7d6dc249d18c59b81f5ae1e7b23e19b316b341c8221fea6c6534f34da0f77f346b7f76bd1b37eca269596d7889b1867b40226c50f4067d8b46dd43eafdf1facd8545474fac807ff593e1a50f864ed908495b30fa5b5807b40a6fe639a60e24dad0cf0488271fb6bf23017bea9188e140729d516f78adf5c9b99d39450f2cdbfe52a2d44e079e579f821851d1c7aa46ddaba295ac7e498a996802f9b70592356ef540f2479712726732a37f982a3dde0494bf7499012810aa129a481c639ec7ab58d1418e249344a54398b4c753023bbf788b2e37b1af3ea7b7b9825026aba53275e8cee991963eec799068d5d0aa9c45d7fb9445c14ea3522acd838850e6793052239af62ebfa1f8659eb7dfab1929a5dbbd3eee01ac63470c3a3e709360e171753734b7ab307fd7f521c0b23b6d902a62f33cc830cb83899892f77febaaea3eb760e2a62a64bc5795d77dcd6e81ca43bf2f52424536c5e729c7ef569132ba01a3a93c059a8010bb71e808f413ec28cae0309e01bd6df1cab7434401729ce6ddaa6adc1e10c1f0be31d96632b58ff1d3fa6c4722bd17ef10479ed3d883bb82a6d40faade4c7a5eeb11a17478671456d217a6a5f8e6fb46375a9be1db63eb6486db90c4f37769245fd20a7ec748286b968181ebd258f8baa1b4a504f0839a2f717091635fd9eeebe37afdb332feb8255a3ca537b68763eaa0eebc16a9d5ce6a9ca2478d561920bd6ee729669df4d5f95d91c9daed3b8f5714068c1f5ac527e7ebfe0fc4542e3549616a5679782e759ea5577ae89b79be1fa56ae811aed86b912d7930512dd9a4180631d04a2c52c98feab272382127ba066d6bc2d9c0ecbb6f47b1716923deaefed5420bbfa184aae5c0c4e5616e2574fc75e07525b9eb9320844a56eda9499a105b2414bbddc3090826f016cbd0248e4d379b75b45434b05d771941abe3a33d1d82f1ec9e6a276cb3dc020509f626542e695af7db1a769bef27a11c3edd18adba6938d6767354552be7242d004da17d22edfd1b4f7df42416ce3965cff370b0883cba1686dc9aca77cb14164de199547853e664a4c8d534271aab3efcced8f9db1d445e5430d7a3c30f5c26e08e7e29cad0092f45ca3cbc81422ee3480f7070249abcbb53725cf0d750772c3775f36ced012afca6a013d3b8149e26648a21a8aa8945d3cde25964a179290d76126c8d0642c3b568ab02dc09e21e4d6856e0c9a26bfc239284da16513b04e06f7ad041f5fb1f708c4302761c6b07f99d0cae955ce1a7b13761177bbd9377772f2e74dd23a8fe1b84a778ad47cf97e2cce634d0e5e30f093312e5fef40c966b93f12a7924374ad1432f9cd17e67754e1a9486370fa04153fbff06af66cf583f2dec3b0a7861ac7cd7e9004b32d642004b110f923b54b7534e050de5f8012a70988d1b6fc0dfcb9def1a982d715bdacee49a5be84f99f55add0bdd2c063ec15127e3ba2f2135b92629c82c3c3a9e90211a67e7a289acda77e68de2985312d41ac5a1082b11e94fc1bbd70c7c7257f1da7c0164ef4067feee3fa568393df4b9c5ecfbee1c4989455c7d93b0b40153b0a6638f3329ebed7c2a536d810c299babe93aa3e647eda8f81b7e57acb1f24f3ac9449da029b3504198f8aac8a12b73e5e09506cace4ab7d9c9601fccb8a936c3c894f8c29cd355894837e7610897fa31c013e4904b3e41a5e8ca2fde4546b58e0f9f7290194e6642fa72d7da82a2334cd6ac300982bcf025770dd7923723a12645e867765b659c86684a9af2186222ed0dd06faf5cd9c6da7bb782b55b5d0152c6643bca28e2b2cc69f806874bf98350d4b51aee8a519a81d07553a7cc43b75af02e308164986a0c2f998e1d48136ecba06ebbd51a8076b829f5daa209568c78941e36519067dbffd6ae56a18447966e3fcc1565dd4336cc93b704d98f53e923a694b5e5c9298de7999d454773b35d7aa124e1b90df9f50cb1f4802a024e487ee3f8bb241ad29a644b8ddb588412697b724f37fa9d2aee5cf8390c7e70b5b99a4a6ab6bf7547809b97bbb9847e21c24449eb0175c8ef971ae1e34ab37aeaa647aa170"}) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x8000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000140)=0x1c000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000080)={0x3a, @remote, 0x4e20, 0x0, 'ovf\x00', 0x1, 0x88, 0xd}, 0x2c) 01:32:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'cpusetselinux$.'}, {0x20, '/dev/net/tun\x00'}, {0x20, '-/'}, {0x20, '!-*bdevem1'}, {0x20, '+'}, {0x20, 'proc'}], 0xa, "06b5697d7342ce4f9541da6108075b783c869fd70b40a003a1e8137cc75ffb74224dfc3b21850f5a67c09ada6086401d164941ca3a4b3837e06a7085acf77fb263db0e1eb3aa79323754709b149a297d90ae67007d489084ddfa8800e8c4e7e5a4709f3f85b469d855413753072730ed92315d2a5a6e8d3a0835adf3f9ee22dbf2bf6e5492dc61a6a4fdaf36c77c36b34bd63d650084ff0c7fa7df2bce3583ac02793b2dfea23bafc976cefcd7e551baa56498efad5d9790199753ae6eb1e57940ed423d92dc89d6425b8b"}, 0x109) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0xd432}) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, 0x0, 0xa}]) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x7ff, r1, &(0x7f0000000080)="3ddb78af1de8ba50c182f3215fa40d3a5949449bdeb1d2d09fa1c7b825449b642111ab259168f53005309f3d6e0fb5313d256c67a18fa0d67f283b61d02e515323", 0x41, 0x80}, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfeedcafe, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000040000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES16=0x0], 0x6) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000500)) r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r7 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r6, 0x4b4a, 0x0) ftruncate(r7, 0x1000000) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f0000000180)={0x88, 0x372380838c91bde3, &(0x7f0000000400)="f4b2d033119526702cbad1dad6377ed8560b49103e2e588f172bd19cdbf3848ff80fd847defcb940bd9e40e32207ae8b1ae6e1eea73a8ca5133110ef247a4b71d42b8554e242693cdee2851b85d8dce0a7d78ae9dedc4df7b66856e2b724b35a519ff287ad2ffa4caf8b70c6a458855f152c4573c4b0645699c51628320504607040b3e8719f94eeccef0cbf03a6ed73629711f8673b2976bfba2786d76910466f4fb71cb032e41e1fe2d9100e24cd801fcb7c7c99b357f0bca6a6385806008a404d411b95ebec3bec7cbfa7658b8f72d6951597ebc3b6c4bcd2e6a46405c0870feca3c2491befc0402a5a425375e68aad1b9402ae", {0x200, 0x8f, 0x30454d54, 0x1bd4ad83a2ccbe41, 0xffffffff, 0x9, 0x5, 0x4}}) r9 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r9, 0x400c4301, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xff000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000040)=""/19) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff027fffffff000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x100000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3abb7) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dcac0d70") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = dup(r4) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000080)={0x8}) 01:32:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x8, 0x80000001, 0x10001, 0x5, 0x28, 0xef}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/94, &(0x7f0000000000)=0x5e) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x9, 0x10000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 01:32:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x200000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000010000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x300000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x400000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x500000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x600000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x80000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000200)="1276726e3698737b835a92b5cecfc7d8ef13e29f64632d27e8afdbc4715abc252fa0f97a1c417e55029fa1e3a26ffdad3fa1b968db6c18a2e4473aa237ac9a2c3bc2909d043e96ca2141d6cb0d23bd05888792d0dc416b02a80c6244c1fa7173c1738c09c7a866bb089dcd7de091aa14767439ebf99f98e9b89c456f2981efdd47075805a3bbf48e44623f0d63e9221d838d00c18883f9709f725299def31f61539ddce57595faa80f12c21d04e854", 0xaf) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x700000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000200)={0x1, 0xa8c1, 0x1, 0x80, 0x26d3}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000140)={'team0\x00', @ifru_settings={0x51, 0x3, @fr=&(0x7f0000000080)={0x7, 0x7, 0x5, 0x9, 0xfffffffffffffff7, 0x7fff, 0x7}}}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000180)={0x9, @broadcast}) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x2) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) listen(r5, 0x400) close(r4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) socketpair(0x9, 0x2, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nfc_llcp(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x2, 0xedb, 0xfaa0, "a7fbbbf5926b9c7806b0da45914ce98d1bc9042f533d2494041edf02e3c0d0032c82574ffb386e2a6c79dc36c81a5f044d10122857c050cb0d2dec35387870", 0x2f}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000180)="80f99a8a1f7bcaee2060cd50b5e6c6b69572ee49f42d82ea4bbcecef86e3c7c472f69ea930407fa487a03a48e2e513c67210465d5efea024ad90a91024c85802d68d5b1c42f391335e4e098b4b6ca6304fc5796072b66d8ae4efdb20d2c43d6a1c59b1a6b5825ffc17462640d48a39153dbd37197a29af08db1cf6c99c78b281f2f38efc9d1ed20500147e7947ba6efe", 0x90}, {&(0x7f0000000100)="3904e44b256dad718770655a0afe69251c5cf27e5f8d30957a90b1d01db8bf58c132cb", 0x23}, {&(0x7f0000000240)="abd1078b4392af12c5e3ba479152adc335a4259ca2594e4c5c6434342dcf66a0770d12ebd80c0ec0b7a1997345b2b0b016d318aa67c6076456eff6cc2e7165d716840df8c3571abac0946ea95d5c3e9b3a473b951ab6c5db771c859961f8ba2ac0d91073d2c4c6", 0x67}], 0x3, &(0x7f0000000300)={0x108, 0x105, 0x5, "3acbeea53017d142fa59358bd164113422c2b5a0b0fcb810055975b1c3e3679230424daf05828964ff419748d43de13d2bac76a6b9a765741b5e547077e0b2a52d240dbc956fd4e85e7b7f140b4ee856b54a095fa6ee313d7dad8318df0779b47d2f2cc8d43ff726044b8b67f59a6e594c60933e364a5a51fb80cf06cbefaf70ea14fb6b0790e64b70ab9ddf93587e91305e69bb9fbf5380dbbfc53a5118da38ac422936df11fb5e6d0fa92321145292c5d8bbee697a47d70290a84e413cc69bb0951b8c7bea445afad7ded4475232a536ffad6668d1d526bf0a3c696453efa938b24deb70604812c405384f9d914bf74f55dd2e"}, 0x108, 0x40081}, 0x20049) 01:32:42 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='bbr\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000040)=""/69, &(0x7f0000000140)=0x45) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:42 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x5) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x7}, &(0x7f0000000180)=0x8) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/4096, 0x1000}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x800000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000020000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000000)=0x80, 0x40000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'eql\x00'}) r3 = socket$inet(0x2, 0x5, 0x35e6) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) close(r0) 01:32:42 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x2000000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000003f0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:43 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0xce1ad4e94724fd4e) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0xd00, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000000c0)=0x417666c6a31a0f62) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r6, 0x9}, &(0x7f0000000180)=0x8) close(r0) 01:32:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x4000000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x334, 0x410081) r6 = inotify_init1(0x81000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000080)=[r4, r1, r5, r6, r8, r9, r1, 0xffffffffffffffff], 0x8) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xfecaedfe00000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:43 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x2, @loopback, 0xfffffffffffffffb}], 0xfffffffffffffdf3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0xa101, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f00000001c0)={0xc4}) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @multicast2}, &(0x7f00000000c0)=0xc) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, r5, 0x1}, 0xc) close(r0) 01:32:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) epoll_create(0xa65478a) r5 = dup(r2) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) write$P9_RSTATFS(r5, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x54, 0x7, 0x80000000, 0x1, 0x3, 0x8001, 0x0, 0x11f, 0x4e2}}, 0x43) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="041075c42ff3e2e97684fef9987ae87e7e318bad27943b3cf96ac65c48cb304e232024066b1bba02be8ddc84f5151ab232bcb6d1c220d85ca79590d8f26cdd9a868242fbb05ef680f533b5fbd57c870ecf0851ba94ec000000000000000000"], 0xfffffffffffffff9, 0x1) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xc, 0x4) 01:32:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000400000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:43 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="2e69912928798cd9d418c23cb2a003616c94283911b57ce215925f8a7026b915481e516e8d3edd4cb53baa162020baae497bcda5434473eb12f76412582b2d33a24f0a4f3ae260b3db9dc6a69885622dc1e035facf85b34575a9e592d6dc2326bf490d3d48c6a43babab357ecd536a2d90a65bdba450c92a1be27f6aa1424b1defbddf33934a629a9735463c74b90894b6e7f5ac2910bb27b5ff47e33f5a0a8252ae8d67a35e1b58dc73b837b61cf7576ef9a95adbf530d88b") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x2ee, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r5, 0x1) recvmsg(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000340)={r8, 0x51, "329148fd3d98df77a3b8beb6a26971d6b4a6f9464d5e69ef036c9fb6d47dacff92097e8660d6055d551932d6142265949b5e187491020b5379ee0ee436957a4a2f4db8f74d34affccac714398523361a06"}, &(0x7f0000000400)=0x59) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) close(r4) 01:32:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0xff00000000000000, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:43 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r4 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100005f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000001400)={0x0, 'erspan0\x00', 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) r8 = socket$inet(0x2, 0x498623f9b9077047, 0x3) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r8) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r8, 0x1) recvmsg(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001440), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r5, @ANYRES16=r3, @ANYRES32=r8, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x2fc, 0x40000}, 0x48800) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r9) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r9, 0x1) recvmsg(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) sendto(r9, &(0x7f0000001480)="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", 0x1000, 0x10, &(0x7f0000002480)=@in={0x2, 0x4e24, @remote}, 0x80) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x480810d4, @loopback, 0x20000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)="41885e0268b3bdf81012f9ff92a2b0328272f57c92bc5b6b475a48a53080c8aec39c2d2de41a607f6eb746e551f6bcaa41e90c02eae929e55142eaaf571b164aca68ff6d61b70af7697cd4e72d3d8cb11c3a7ac62a56c61ce921664724dfdea828b9ccab466b697c4b76c32442aff2b9bab1af25dfb56175892abbb108aac7d5854134a29645ff2f3bae", 0x8a}, {&(0x7f00000002c0)="8f7e1e8c355ae350aed4c5238ece2b90b3f148e88b9b162ec7393bd50463935dfc30829227286dba3aa2a3ad4388478526576e4f2a0531a9d43dbcfc0f89aa1d467beb23be87a5d84606ee426c1b15d72766e7fbbea659c133aa3519efe42659a24ddff48012e563e1f6c35e586017933347e70b926ee3ed406adb9487d05eaee63bb2701e8fd68c26dee3272cd3628acaaa298cc356b32d652ceb52255535861f64f34f25f8136531f3d5daf9c982bdc8a42dc877c9a71ecb9c095c689824f4ddd062822e23e8cf2f094b5104fc74b746027bbfc8adc94ccc37a98f0dad", 0xde}, {&(0x7f00000003c0)="38f1a7775748888c4517b875a0f3eaf5db3d500382813a4bb8cd059b5e916ac2ae5a5aa61cbce54fac8498da7ea8ff9ca68cc9df360dce9e04d087ed628a6b918c6f188ee97b9564d928d62f38b535f597bd73f0050ea3e8d19fdfb2b95adef202014d710edcac6c2e2be17ede9971aef8837ac5ad2474022ffc6cba91c683ec5831880293d1acd61daf5d72cdebd78131c71be9c992feb46ed553135c817d6191176718588d2836fe1a2433c4cf569446efbc7b268074cce2f9e9872578bebb0fff213994006559d17566f4cd70cc69789b5138a8693b9ab05231f5c2ce9a5abd1d29b3482fb0274d87283e79dfc1346812eae0308c9b8c281a5d4b038e17687984edb4443f86a8387f03d7b2deb24009fb8dd5a43c63e80cb3cefe5bf1eaa6a01d265d056d6a64310a10f04bb6ac810c78c25a147e73f04716016cc1ace68c4ec2c644a5606494baeef1ee3487694a39b428e43a30e6ffe0249f99537b6527af526e2316e5c4045d5bca9a64c204a6c888428113a421ab9c6ad92aa1bc29efcd84b8d5a9fdd348c7528b3ae62179743440bd2418c199e612f2b3c1062ae80703c4ef445684cda1581c19db5be2a7d5d0e0426d49026265f2fa29addde215d27f69ae4320fec67bbb2466059cfca024a30abdc89256330f8eeb644b1a261219486c1b641e0b4b315e0eaa910d5601e141c9af9896356f1a02e20ef99d28c6fce6d9307ab7bdb37a6f4f4731ad8e59c2910647446772a5b2938aa4590d39fd1634592186e8096e56bee6ad988118ba8ed46994f0042438066d8d72a8153f947de38fa7e642e3ad7c3b991bfde179f3e8070d8a740df22d9c3e49fb9f20ace2a23ce12c802dc2bc2b1699993f8d3d704065ff56f1a451307dd263f7292bcf84b200222e5f3df9f4ce30344458d3a159cf7c9764efe3779bd8194f3feec552b306e34ccfa7a0ae26720fe921ec763b2080c577b5f453fa6c9e4037cfd33639d5a9d61d525149f56f9090d47808474f910e55fa2f5b689401f67827def8cb1fe8f8562b0d519a3f2d50bfec5d3237f1a843e16456e5f61dc0b906b12207128bb893f9a9e10825bf6c6d352716d3c9f3bc0ceca35457fa2c89957459d66caa6c4968c1b33fdc44cdcb7628fa7f72c9d9a276b18592caef23a41ea8efdc70671b7278abfe1cdd1fb44b868e96ccec88d774fd8fcd6fd772de70d59699e41e8bf9e16c6df5c1cfb3939a651b4120ae7ed2eceb9ecab6d0bc90abc9dfe597f43177e4115d8c5c5b5e0fb56187e25443dfd850902bc37d43ddb1e93ce431a10504b92da79243db0950480c56c60b3e74752f9cedba0b3109d787ae0796ae837567db63cfd3339acbd918ffc9fa0ad233953ae09d31199e66f66ba10bfb6afe1ac4713e5f930dcfd9593bddc9480362c41a44941d381350261333253f4272ad635d1ff9ac08d0a8ac69c3bf18d6208d7de9b96088743b162b0a88255e685fd4f4b6dfc53c769ae67556c1a744b9da5e73684a91ec737f7cd23277dc59618c469999dbf2ebe3cce9b1d63a54032c5381e9c669fdb4415a96b3128fcf4e689c9069154ed35ad6c04827952558df25ddcb92ade4bb7272b539294158462ef0bf9b2ee77ce82145bf509fda2ae66ab08c7e190deb05b97af17c6180961523effa8b698373553420d3a9bf268b2e25d5ff2f827ef7a235b41cb7e8fb7de44b9fc2ab5e2158d1d8cee68b5ecc94b2c5a030ed10b2d81cc8ce29243e1c0995d12df133fe0319ede0c06079dc60eb3ad23f3fc2d2bb1e40baf6f7fcb351f513f61888f12716cd4a786907bbf1d539a53428645e249e7da0be23bdc4fca6d662ff50a5f3c4b7bf6336a5c68d60207a19b633e0671c4348ed1a37a6f64f0957b7206c98d329935143e71881d016115fc79c45bfbf7d8b411fd44f39b2e0ce96f45bb54e5a93747ffcf65e2363bb727ffd04757f6f5a5cd25bc0fd2b1742531ebacc39fc4975fef64d7c26b2917ef60ccf6e286f31650789f29aa6d78a3fc37f488f598cfce5348064b0b796ce9c15cc1ca3babbe71340f771e40290ab1b9d9661c4bfba1ebb7b60630f2a76eb6a7c96e3ff8dc07029310e446fa285b748ee775d92aa38251e8797e97a542b85834dd26b1cb4813413d653aa18a33da4568e4a271e04e044c68be8c5d3fdd2014dfb5d4bda0157fd6756b3ba05839b11927883403ce2acd9c600014d73f2bd889e14a59f5c0a22d988fe975c9450442d83ccc285142032fa2c8d81a78128077f4f8ae720ff23ce5ded6e286e7cfb69a7e349379f0a0ef3231c9d85ed27a4f8e61ba48dafca7b43cc434cd4087032754e6e4497de65644a732639220fd25be4a06d03fb6373a79770b2c090e3c1fba284c4f5d36631fb6e09ca41fa74d56790886079178275e2db76c34e3134a50b4d4ae12be51a85404a25fc61145248a54ab74041f67686a28a4ccca036d2d6c4649f2dc3c2c4d3be28ee57a51a2f892ff2249272d5e10e1e2851320a8c50636cd08c051963f55b173febb7872b87caec4dfdcae2bc6ffd1e3363c3bd2d1d79efb4bafccadfa9ea9cacb51ebf288c89ec0ff9dd272b48e16cd0bc8c9e1cca1b9c17fca4a8a977cd4e3e20dca2eb781df5c9218d6e0695c553e204b54ace3c9e7825bad0459ede398815f674bbb9a0d884b65a7d1def6bc86f6d17c2993d4310e469f48df1078dff706f078303af0bae37bfd56fe85d4e1145cc66b76e273c46785133aac5ba1ccf0c7bc103030478fb42cbb89623bd6facf1baec940b60cec40f197157f76e7338c43c6eeb424a2893c96f09bc6129ea9005b0a582cfbcd55073bd8c0b5efbc3af83ec004bc2eeb3f98855e2953a9231ec42f08df5e197b4d660b932e711ba643b9b1b0d86b36e3d07fa3b6ca2d23607af16fe532caff810895a97699b6143812fb73defdf23213d48efdb1f3792adde36aa0dd6e72c03982e0ea357e75585bdf31991ef432388961e47219a4a7713c62b4e8352f7304d041c5b9920afd7962599a598a98f9e10a13a707a72b52e9078e090857c4d2776be24739549d2005e2b4e74493317c4e6b035cd6d0808329164982249f8051b5f445cf36442a2326d716e4340f8f33916a8654df8a1be92e5b93f9e6968302b71807464eaaf02cdc3c87e9f14d78919f88873bcf53516e4a638ef7b9080bbc04bbb5a0817dd4d543f8e4eda78d6dea4de8e3034142a8f07c16f6b47f39ec0dba5afae9b0d1ad869a0c42d5b4cbbcef0566d1c66e819acff942f471611de5cb7e8144954441c9887ecbc47fa3bfbb5400140b5d412d7aa92d8ca24b903098f15f6f701ad8f09e3fa57819d5e99657b015b8cc7213236cabd3693dc1c6ac4f9d073ec02eed327b3ad6c6edd6b393ad923b817f0695864036c479343cd095b67bdbc8991ee2b763d94d77a158d46a43c76b3ffab336c7371fd493f981f30d6d2348e024c4cca12b0b1aa5fb2d643269af1937d3a2614f1b1a8c733c55148f643c175b5218a07c9e65d701e425595dd24e9cc4a042abf67cdf2388b38ebb7d671c65d096ddcb082271d72a6a85e8314836acbf9f219de87c5aaa250d41a402f4406e124078268bef04923917be608f7a2c553a1f27a54a33d96d84cb5e747e0c62fbe1a7d35d83f101a72ccf48485fc21a6df7bddb85d017dc2717dc1f79fbdca711651b372601d35a655884e10b94fcb7dc8f08057902543752b43c38eec8f4613b631ed81541a478421722ef72af077680e7be63d5b75f9eab41c85dcbe65ead133427287d3f4c647ee764a80bce87f88fb04796c0e6309ea730e2523632dd1400ee20d4f8b54c8f6bb3c592a0e74fa5acbac4a6ee61489c377d6ad35293b57e7f5b0d8d447c4c947cd60d95dfad8945362af259bfcbdf876d650afc8d1e3059aa8f0bd9a7491682b1e87ff811fcf9b577792d7dae4b8b5b9810ac9f256882fe3af28ec565c80b9331c1194151334685bae467200232650d5036330e54e39231345c706dd2a5770015e57ecc9bfd1fabfb832d6736bee24b7526248840440bc6c613a83f595ab56bd50c0573ace7e62a9004686c79def25f715c0cf42af7a2a712d778b8d71688ee33a589f0f49bb7f9d81d298d59a0019dcb469883fd586a85f7d57cf2b5af4fde6a6fc17c1d873a6eb12e916845e7d869f1212304e8a4cfe7680fcb10876f15d606b116cbf88de2f2dcdd50440855511ff899759c4ee08446d46cd9b1d969ac2f6325541e770025e10ffe61931394a3111db112ee2b9619550ddf39e51123952d0f1ebddf56c0e59b89a53242a0ee58fb26bb6a63057f204295ac4dfa1ec956a601833e10d19f179c360ea4f01480d298066e162dc0b56f6de10d0d07ac90a84c1f445b8c6c27322ef5e4af2c544f74aa98c9642a4a0309758c9250f87f6920b965efbc0cb9988ab88655353627c5b56f90d25da9869138443ce08c8ee868d39498991a6d839513f7e1320f1e030affe6630ef40e6f010eb3eb7fe087115ab1a8ca9a8ed0e3cf62d88da5a102d2dd8b66f6367f3b77fa3e5bc3dc65c76a29423db276022e99d55cac7660154412db96789a42f9f594ecff2e55fba56585acdda3371b88e83b5667152e92d0bf7938f857612b832004d5ad49153716eed25ff911f882592eaca38ea90555660acb51c24c5de170f41233e4e679ba8a2af7fd6db4aefc4e1b4a4514ccfd6a432c6b57559e236c6690a4871d86f7339be96c61155f7e0403e5db4a0aa588d366ccc38c2805a12a40e8aa9c70ecbe01be56757ad2268308c1862743b880eeaa0fff440ac4c8ca127ee1754c86b5ab152aab0e2358f720aa23aeecdd26e33894008ec15d7633cacba77f5115c6585461afd1b38a1b05dbd1db900b7ebd0a3708e72735f39636deef22df24ef9638ec25e4fa6d88395072fbba1c236e14ce603c38ef966c88c399cf7a2d264c8c7f73ef28ec6aabc9da1e1433fe814ce6c73b8f790f15974a98e9dfaf864095dc6eeaab85866ec90762b732a790a74f446e67b69f6cd6aac9fa331b8741c37c9af6b8d075fd79e127d90d74bd69720526b1b3da0e9280591d565e24889d0bce9bf939d71c2c961776b8b3778aed90da681d7568d6bf8e0f72330090f22f8bf4af1874c2c887e068a927245f0997b980280a81e0446f34de7608e1fd6bd70547865e2d3ca41ec89ab0c64c083340708ce8ccc450054f2be0cb5f5546d7f4644c3b17e045abbd2f69998588265803968344cc3d039df4212824a3df400c159304f4399c97f1668066ad0c169afbdc67af981c9e216c0cc012e7ca32d0a540bd5bb241aefccb214879f1116cb42cfdc23a446db172fd2bf76a922cd91222a30f9000d2472c068a59d740153378a08345b36e6a148bbe5863ea3ffd99367e1f8ad5ab183acd7e099618e88c60454a211720190166ce2488d90059b21bf76a425671238cad594f844f5dfc5471e71cb3e362d3ca8c1a8695658e6ee7e446978fc33e138d449c47a91f87117ac569bf9ed30a9db47deadd83d9b2a4f70895531bdb9e66a1c51c1b4c5ca29324f53008b62c2a1483b870690f762e28d432b298e7c79e13dff0603961a041303963692ca33e7ee1c3eb57027f39477f3abfc91ef290177ff2cdfb6a037ef35ea7aca0d633695b85e2e39c973561452f772e857c6128fe654321b8dc7a30190a0874567f821de43efae5bf8b8c8ecebdcbdd04238e13989298df5154b0a602706e0ea4a22e21cc9a37db2e534c8df00e2f045657d562dbec5a9ff9861be09d4aa2f95352917dafa40b5473bd1", 0x1000}], 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000000000000840000000100000002000000080200000500000004000000ffffff7f09000000fbffffff", @ANYRES32=r5, @ANYBLOB="2000000000000000000101"], 0x3b, 0x10}, 0x20040000) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x40000000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000014, 0xffffffffffffffff) 01:32:43 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd21a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) sendfile(r5, r7, &(0x7f00000000c0), 0xeefffdef) 01:32:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000007fffffff0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x4, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:44 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x224702, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x800, 0x8}) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) ftruncate(r1, 0x1000000) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r4 = eventfd2(0x4, 0x40000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0xd3700d146c7ba173, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4002, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x7, 0x5, 0x74fc348f, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x38061, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x4) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x11}, 0x1}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x2, @local, 0xffffffffffffffc1}, @in6={0xa, 0x4e24, 0xe6, @local}], 0xfffffffffffffdfe) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000ffffffff0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000200)='\\vt0mneT1em0user\x00\xbf\xb14\xe6@j\x92\xff-\x16\v\x8a]\xcc\"N\xbe\x81{\x9a\x86\x8c\x9a\x05KP\xff\xb8\xaf\xb6|\xd0\xadtIo\x02\xc5F\xa8\xc2 \x0e\x8d\x065+d)\xf4A\xf3\x7fj\x0f\xbcjn\xbb\x13\xe2\xfaq\xc9Ht\xa9\'^\x11?$\xad\x888\x19\"A\x83Y\x10\xddnQ\xae\xe6[\xa8\x0e\rx\x1e\xb3\x06\xabe\'#\xb9\x17.T\x17\x95\t\x88\xa5\x8d\xcdx\xd3S\xb8%C\xc5\x9c\x1b\x06\x8eb\x8b\xec\x1f\xf8\xbf0\xd5\xc2\xb0C\x18\x83\xb1\xce\xce^\x9a{\xdd\xcd\xab\xba\x14\xb7\xe1\x0eb\xa8\xbe', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x492d00, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='[self{S@\x98eth0selfposix_acl_access\\\x00') ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x2}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @empty}], 0xe) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x100000000, 0x400}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r4, 0x4) 01:32:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/214, 0xd6}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000005c0)=""/130, 0x82}], 0x5) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x8009d39) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={@remote={[], 0x3}, 0xb, 'ip_vti0\x00'}) close(r0) 01:32:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02ffffffffffffffff0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:44 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip6_tables_matches\x00') ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r3) ioctl$int_out(r3, 0xd1ac8b0416d18b7a, &(0x7f0000000000)) 01:32:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x632, &(0x7f0000000080)=0x4) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x747, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 617.994225][T25952] vivid-004: kernel_thread() failed 01:32:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000140)={r2, 0x15}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r3, 0x4b4a, 0x0) ftruncate(r4, 0x1000000) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r5, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000340)="11dca50d5e0bcfe47bf0707af691c19b22e1dfc7d4cd74e9d79a58551c80d65fc1d26b31b2bc48c821aa4806000000587ac2e810b17afe01feee42068ad1ac0857a574beaa964944618a48fbf883a5fc6d94719b6c673e1f4c1fdcd804df529ec2989cfcf36808d16374d2115b248c9117abe2d2c75eb1449efe9cabd9d615fab40215d3d717f63706c18c4e33e9963a3846a1a7612c478cd9fdf855c83eb3ae8f7980e07432c8469351f2bc19062106960efd63615546fbe53f37778c4c0106a2dc0eed25bc38d243b3c95a2435f3") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x81) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x1600) close(r0) 01:32:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/dev/vbi#\x00', &(0x7f0000000080)='./file0\x00', r3) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200020000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x9, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x4300000000000000, 0x100001, 0x495, 0xe, 0x1f}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) connect$caif(r4, &(0x7f0000000080)=@dbg={0x25, 0x7fff, 0x1}, 0x18) close(r0) 01:32:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xa, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200003f00000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xc274, 0x229) close(r0) 01:32:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xb, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:45 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x51d6, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf={0x10, &(0x7f0000000040)="8f7a4ea9e58f5bb6f31ee8f87d6d4c2c"}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x101000) ioctl$TUNSETLINK(r2, 0x400454cd, 0xa74f25d06551288e) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) pipe(&(0x7f0000000200)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x9}, 0xf) 01:32:45 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0xfff, 0x4}, {0x1c1, 0x100000001}]}, 0x14, 0x8117f3f597dc55b6) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200004000000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) socket$inet(0x2, 0x2, 0x0) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getgid() ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000010000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x13f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r5, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfc000000]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x15c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f62}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}]}, 0x15c}}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000140)=0x68) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r7, &(0x7f0000000280)={0x20000005}) 01:32:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) listen(r2, 0x6) 01:32:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xd, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xe, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x80) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6612) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01f3ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000026c0)={r7, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r7, 0x1}, &(0x7f0000000180)=0x8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r9) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r8, 0x80000001, 0x0, 0x2, 0xff, 0x1, 0x0, 0x9, {r11, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x8, 0x10000, 0x3, 0x81}}, &(0x7f0000000300)=0xb0) close(r0) 01:32:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000005fc0)='/dev/usbmon#\x00', 0x39, 0x430080) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x408000, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket$inet(0x2, 0x8000c, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000005e80)={{0x5, 0x1, 0x6, 0x6, 'syz0\x00', 0x7}, 0x5, 0x20000000, 0x0, r5, 0x1, 0x33d, 'syz0\x00', &(0x7f0000005e40)=['\x00'], 0x1, [], [0x9380, 0x1f, 0x9, 0x7]}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) r8 = accept4$bt_l2cap(r7, 0x0, &(0x7f0000000180), 0x0) recvmmsg(r8, &(0x7f0000005c00)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/125, 0x7d}, 0x18e}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001400)=""/20, 0x14}, {&(0x7f0000001440)=""/226, 0xe2}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/139, 0x8b}], 0x5}, 0x652b}, {{&(0x7f0000001880)=@can, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/24, 0x18}, {&(0x7f0000001940)=""/41, 0x29}, {&(0x7f0000001980)=""/36, 0x24}, {&(0x7f00000019c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/174, 0xae}, {&(0x7f0000001b40)=""/133, 0x85}, {&(0x7f0000001c00)=""/204, 0xcc}], 0x7, &(0x7f0000001d80)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000002d80)=@generic, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/222, 0xde}, {&(0x7f0000002f00)=""/129, 0x81}], 0x2, &(0x7f0000003000)=""/141, 0x8d}, 0x10001}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000030c0)=""/191, 0xbf}, {&(0x7f0000003180)=""/212, 0xd4}, {&(0x7f0000003280)=""/25, 0x19}, {&(0x7f00000032c0)=""/228, 0xe4}], 0x4, &(0x7f0000003400)=""/119, 0x77}}, {{&(0x7f0000003480)=@isdn, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003500)=""/176, 0xb0}, {&(0x7f00000035c0)=""/175, 0xaf}, {&(0x7f0000003680)=""/112, 0x70}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/188, 0xbc}], 0x5}, 0x3}, {{&(0x7f0000004840), 0x80, &(0x7f0000004900)=[{&(0x7f00000048c0)=""/9, 0x9}], 0x1, &(0x7f0000004940)=""/165, 0xa5}, 0x80000}, {{&(0x7f0000004a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/44, 0x2c}], 0x2, &(0x7f0000005b00)=""/244, 0xf4}, 0x401}], 0x8, 0x10000, &(0x7f0000005e00)={0x0, 0x989680}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000080)=0x3, &(0x7f0000000140)=0x4) 01:32:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000020000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:46 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff}, 0x30) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000200)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffd}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x1) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000600)={[], 0x3, 0x5, 0xfffffffffffffff7, 0x0, 0x71, 0x5000, 0x2, [], 0x9}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000003f0000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x10, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000200)=""/135) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r2, &(0x7f0000000480)=""/120, 0x78) r3 = add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r3, &(0x7f0000000480)=""/120, 0x78) r4 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="0b125d98e7f7bcb3d3bebe5151c4bfb81c7ea02b2adb01130057af9bee3bb0c7cf514e9063e1d4aa08bfc360bdce4ae73d0c81c93c440044d3d75533a845f26d1f8d6bf8f83ccebdfec6fc94eb639767412223985dd89a3eb1036d4c80382788a41edb5960439044d542024eba5a11c2d9c101051a8fbbcc9505f910cade9a71fe981467215e64bc5aab31ac6ededcc2de7595e6824ec00d773550f831e88c125eccfa513cf6a962a8a1b61f750a1937e6e1e35dbed481c14ee5b3a474ec378c13f5ba7e0e4a5212a1f859406c0528db3e52bf0fb020512ef6be7ccaf5", 0xdd, r3) keyctl$link(0x8, r2, r4) r5 = semget$private(0x0, 0x2, 0x10) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000180)=""/109) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x4, 0x4) close(r0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000000c0)=0x40000) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000080)) 01:32:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x3, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000400000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x5, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:47 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0xfffffffffffffe7f) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x19) close(r0) 01:32:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) write$binfmt_elf32(r3, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x7, 0x7, 0x5, 0x1000, 0x2, 0x21, 0x6, 0x6a, 0x38, 0xc6, 0x0, 0xfffffffffffffff9, 0x20, 0x1, 0x0, 0x4, 0x7ff}, [{0x5c74e557, 0x2, 0x10000, 0xff, 0x3, 0x101, 0xd87, 0x2}], "c3d592b523a2ea5c9252af8e1447526aec2f26ff7074462ff936f9344fa216db8e29ecbfd2c8bd2ed4", [[], [], [], [], []]}, 0x581) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0xc, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02007fffffff0000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x7ff, 0x400000, 0x11e5, 0x2c000000000, 0x7, 0x200}}, 0x50) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) 01:32:47 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7ffffffe, 0x35b) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = dup(r0) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000080)=""/103) 01:32:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$char_usb(r2, &(0x7f0000000200)="56f7f3ddeffe5304225f38d34ba09e96f777e8c30df94707c909cb76043248d91dbd565ffdf3fb6d085cec96d8e78e5a808478682807e2e0869d8c5b16d9b2d0679c218ddab6f90e90285d8a8d46df4f3ecafaffcfa0cca9eb4c719a60d203132a18ffdab58a981834d24161ea96e6510a5c5cd4f349818fa68d6b45358c52f643", 0x81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x10, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000100000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:47 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x10000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 01:32:47 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x44800) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000080)={0x7, 0x100000000, 0xffff, 0x4}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x300, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:47 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x8, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000200000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0xff00, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x7d, 0x1, {0x0, 0x79, 0x3f000000000, 0x1, {0x657cdddd9946899, 0x2}, 0x100000, 0x6, 0x8001, 0x9, 0x0, '', 0x1f, '$*loem0wlan0vboxnet0eth1cgroup$', 0x16, ',-\\)-systemppp1-wlan0.', 0x11, ')*\x1cproc$s+vmnet1%'}}, 0x80) 01:32:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0xc100565c, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon0\x00', 0x408000, 0x0) ftruncate(r2, 0x7) ftruncate(r1, 0x1000000) r3 = socket(0x5, 0x3, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xe0, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @ipv4={[], [], @rand_addr=0xfed9}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff, @local}}}}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x246}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x41001) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1850c2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000400)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) splice(r1, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x4) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000003f00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0xffffff1f, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d675e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast2, 0x886a}}, 0x24) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x10001, @mcast2, 0x3}}, 0x6, 0x1ff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0x8, 0x4}, &(0x7f0000000240)=0xc) 01:32:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x9e2e192f61ff4dc0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)={0x81}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000040)={0x9, 0x3, 0xff, 0x100, 0x100000000, 0x8000, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000004000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) close(r0) 01:32:48 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000007fffffff00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffc) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x10000, 0x200000) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ftruncate(r7, 0xfefffc) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460200c408070000000000000002c9e745fd49f69a9e0300000000000040000000000000006b02000000000000ae4ca45d010438000100ffff0900010001000000400000000100000000000000000000000000000001000000000000000010000000000000da040000000000000002000000000000570d29f2816ecca1e1d3431c6100ceac753d7c179cd40c230cc8b63e64d7776801ce31df27addf83a7b9c3fc4b2c5cf90554c7f4dd92676ff9e492f2f60f809736c8b3892be8a8fa925d5ce1b6f3604c439b1a44393cf3cf44bae0ef23ea41ad19dd189866d1a083af770b5a62b1f016c4bc2edc57b662df69e3755e7f6ed9ae8b5265f647995bef0bc5d370011a009d6d7624e1c8977858d4da1da627d8e02e091d82d17582288c8d"], 0x121) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCLINUX7(r8, 0x541c, &(0x7f0000000140)={0x7, 0x8000}) 01:32:49 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}}, 0x0, 0x0, r2, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000ffffffff00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:49 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:49 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x100000001) 01:32:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x2000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xf9a, 0x4) sendto$inet6(r1, 0x0, 0xffffff8e, 0x0, &(0x7f0000000040)={0xa, 0x4ea3, 0x0, @mcast2}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") recvmsg(r1, &(0x7f0000001280)={&(0x7f00000000c0)=@nl, 0x80, 0x0}, 0x40002020) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200ffffffffffffffff00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:49 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:49 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80800, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000080)="3be0c7db469c6cc904365aae8a43e78356d7da31fba05e6386e3cb37d392467f511be7b4f58f4b042f88f7347b0a37dee25b705a2547") r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x10, 0x0, @loopback}], 0xffffffffffffffa0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r1) 01:32:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000200000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) r3 = fspick(r2, &(0x7f0000000000)='./file0\x00', 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/216) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000003f000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl(r1, 0x1000008916, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:50 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) mq_getsetattr(r0, &(0x7f0000000040)={0x200, 0x401, 0x200, 0x0, 0xffffffffffffffff, 0x480000000, 0xffffffff}, &(0x7f0000000080)) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sysinfo(&(0x7f0000000340)=""/161) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x100, 0x3, 0x2, {0x9, @pix_mp={0x10001, 0x7, 0xc3847a0024048309, 0x4, 0x0, [{0xe, 0x1000}, {0xb8de, 0x80}, {0x0, 0x9}, {0x1, 0x5}, {0x1}, {0x9}, {0xc3, 0x9}, {0xfffffffffffffff8, 0x8}], 0x7fffffff, 0x9, 0x3, 0x1, 0x6}}}) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="875b71174fc5d344a1c9cf176946173c", 0x10) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000), 0xffffffa5) close(r0) 01:32:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000040000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:50 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:51 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @rand_addr="93fe3164b1ed5b01d4756bfcad26d741"}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) rt_sigqueueinfo(0x0, 0x22, &(0x7f0000000080)={0xf, 0x4f, 0x84b6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000340)={{0xcc, @remote, 0x4e21, 0x3, 'ovf\x00', 0x34, 0x9, 0x6f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 0x1, 0x81, 0x8000}}, 0x44) close(r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x983004c}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 01:32:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r3, 0x2b6}, &(0x7f0000000180)=0x8) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r4, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000100000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 624.379778][T26389] IPVS: set_ctl: invalid protocol: 204 172.20.20.187:20001 01:32:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:51 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x464, {{0x2, 0x4e22, @rand_addr=0x4}}, 0x0, 0x3, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @loopback}}]}, 0x210) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000200000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x100) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000080)) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000003f00000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @remote}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000080)={0x0, 0x3, @stop_pts=0x25}) 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000004000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) [ 625.128271][T26432] IPVS: set_ctl: invalid protocol: 204 172.20.20.187:20001 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x8b6b353) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1e85) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = dup(r1) dup(r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='htcp\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x0) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x2) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xf4, 0x0, 0x1, "d2c8ae32a287ffb6cbc19b7f040c8a54", "a347e14d79a14f55b53764a4b530fdb59597a5b9ef11f8911843b56af5ee8bcfa761365aed107349db1e9804c3316b95a1a75f189661d535520823c4ab2d40d0c860d020b29949bbfc9d017aef5fa407be104c9e72a6eb912fbc60311663bc597fdfe94f4947c2e2e8173ac30ea807598107804bd2982e6810546c355954d062e105b49fe2c72d8d54461ae14a388b13d9e6f854cf5d4373ce1ccb43f9ddc5a835dbfb2112978554865c153ab2803e908e8241f0988bff0bd7bd9ea44d671c80d907017ce5f1a107ebd0132885d387bac41df956c18d2469c3ee6f6ee074ba"}, 0xf4, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:52 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x10, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r3 = syz_open_dev$usbmon(&(0x7f00000017c0)='/dev/usbmon#\x00', 0xc29, 0xb202) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x701}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x1c, 0x18, {0x583e33af, @bearer=@l2={'eth', 0x3a, 'veth0_to_bond\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x20004004) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r2) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001740)={0x12c, 0x0, &(0x7f00000015c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x40}, @fda={0x66646185, 0x7, 0x1, 0x3d}}, &(0x7f0000000000)={0x0, 0x18, 0x10a}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/106, 0x6a, 0x1, 0x11}, @fda={0x66646185, 0x3, 0x1, 0x20}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001280)={@flat=@binder={0x73622a85, 0x101e, 0x2}, @flat=@handle={0x73682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x4, &(0x7f0000000280)=""/4096, 0x1000, 0x2, 0x25}}, &(0x7f0000001300)={0x0, 0x18, 0x30}}, 0x40}, @register_looper, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001500)={@ptr={0x70742a85, 0x1, &(0x7f0000001340)=""/227, 0xe3, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000001440)=""/170, 0xaa, 0x1, 0x1a}, @flat=@binder={0x73622a85, 0x201f, 0x3}}, &(0x7f0000001580)={0xfffffffffffffebc, 0x28, 0x50}}, 0x1020}], 0x1f, 0x0, &(0x7f0000001700)="6b77008ea8f0c485e348f89c82c95ecfdf03f98e9b0d623e8745f2dd7d10ae"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x65ec8271ab55ad1c, &(0x7f0000001780)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200007fffffff00000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xcf, 0x4, 0xfffffffffffffbff, "b513ea45829f6f07021feceeff6f4061", "8cc9222bbbf498695dcb57711529d9899168ae3bb2008b76f7bc327d378d102df4b3ac433833d18d9958b43cf40e988fc6aca1583391f36c32ce7d40a2a7946e77b38700cd8b6c704d1b33f7130479379b8dd21163077bbc0a8d79ecf499f599653b6c31c27c1dba3cbb02ee86265701759e173d1bae48c0fa3db5d5bb89b61b4bf49f73250fe51ac882ea5f79c904eff6b16bc02a0f18f974ce26374322efc74edac31624787830004793f439eafd17a568548f481234425241"}, 0xcf, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x1f8, 0x20048870, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x24c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x2, r6}) sched_getattr(r6, &(0x7f0000000100)={0x30}, 0x30, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6612) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="85ffffff88007c5abec48e4b94f002195581860000000000000000000000000100000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r8}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000026c0)={r8, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r8, 0x1}, &(0x7f0000000080)=0x8) close(r0) 01:32:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x20000) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000001000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8fa1, 0x4a0020) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x0, {0x400, 0x7, 0x10000, 0x100}, {0x7f, 0x5, 0x3f, 0xe2a}, {0x20, 0x2}}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xc271, 0x4) close(r0) 01:32:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000002000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1) ioctl$KDADDIO(r1, 0x8925, 0x70e000) 01:32:53 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x1f3) fcntl$setsig(r1, 0xa, 0x1f) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') sendfile(r2, r3, 0x0, 0x7ffff000) lstat(0x0, 0x0) 01:32:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:53 executing program 1: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:32:53 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:32:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000000000003f000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 627.018868][T26557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:32:54 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:32:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x8001000}) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:32:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000040000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x4) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)=0x80) 01:32:54 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) 01:32:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000007fffffff000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:54 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) [ 627.880089][T26581] kvm_set_msr_common: 2 callbacks suppressed [ 627.880104][T26581] kvm [26577]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 01:32:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000200)={0x8d, "b61e1e371fb24ec04b730527724a7131c7684326f3b988f11bafe1400ce28fc88014cb844c3f605077a43ffda73bc3d4b60d096d06aa6ca036529c3be1db96b4b13d93daccde4faedc81d722a001ba0df71a98319149be835eb258bf0e0909e74123cd72ff3782d130868f17ff1834d52c647efb1925e84deae1a0a0eed1c81880c139211b338aecefc4532c51"}) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000ffffffff000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ff03ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x0, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040)="04", 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x5}, 0x3c) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003b80)={0x0, 0xff, 0x0, 0x2, 0x1c0, r2, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040)="04", 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, 0x0, &(0x7f00000004c0)=""/155}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088cafeffffffffffffff63a377ffac141414e9", 0x0, 0x100}, 0x28) 01:32:55 executing program 1: r0 = gettid() clone(0x8000001000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850001000000000000000035cbd6ce971d9e76ce868d663dadf105c9e20400005641a2e7588c1c5324517ce6347785354991f5affdb7e79da4c3f64102000000000000005d646158c407a71ff44a4f05b94226bf860a85f57cc7f3bae84c54e21100000000000000000000000000000000000018000000ad5c963099472d38bc8d5ec97637d597d5da2c3ad6f7e96fe70700000000000000f296b9cffd0da6e2000000afd72300000000000000000000000000000000007df520472b72b92d1b2aac805aabc5b16287e64cee8a9167dc38ea08476eeb5ea0fa2a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 01:32:55 executing program 1: dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='uid_map\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:32:55 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000ffffffffffffffff000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffbfffffffffbf, &(0x7f0000000000)) 01:32:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swrafio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000002000000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x6) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b0f, &(0x7f0000000000)='wlan1\x00\xd8\xe9\x86\x10\xa3\x01Oj\x00\x05\xa0\xd9\xc2\xd9\xe5\x91:\xb6\xd1#[\x16]l\xb3b\xaf \x00\xbb\xec*\x17\xe0\xd2c\x04\xa6/\xb9\xd7 r\xe2u*\t\x19i\x90\x0f\xf2Z\xeb\x8bF\xabo0\xc7\x95E(b\x8b\xfc\xed\xcc\xaa\xbc\x107\xdc\x93\xf14T\x01\x99T\x93\x96\xb1\xa9\xbe\x1a9\x1feu\xe6\xde\x84W,v\xc2Y)\x0e\xa2\x16n\xa3\xc7\xfa\x00\xf3&\x00X\xd6\xc0\x01\x01\xaf\xb3?f(\xce\xa2\xfc\xa5\xf1\xd5\xce\aom\trq#\x87\xe6\v&QP\xf9\xdc\xc0\xfc\\kc\xeb\xb5\xcf\x96\xb9\x18+\xe4fs3I\v7^\x81\x16I\x88\xdd}\xcaa\xc6p\xd2P\xff\x02\x03F\xd5\xe8\xcf\xf1\xffE\x91m:\x9ax\x11\xfa\xbdI\x80\xed[\xfd\xde') r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x90040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'ip6_vti0\x00', 0x200}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000005c0)) ioctl$TUNSETLINK(r3, 0x400454cd, 0x186) 01:32:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ff03ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x0, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040)="04", 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x5}, 0x3c) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003b80)={0x0, 0xff, 0x0, 0x2, 0x1c0, r2, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040)="04", 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, 0x0, &(0x7f00000004c0)=""/155}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088cafeffffffffffffff63a377ffac141414e9", 0x0, 0x100}, 0x28) 01:32:56 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @default, r2}) ftruncate(r1, 0x1000000) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r3, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = semget(0x2, 0x3, 0x10) semctl$GETPID(r4, 0x4, 0xb, 0x0) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000200)=""/173) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000003f0000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={r2, 0x0, 0x30}, &(0x7f0000000480)=0x18) 01:32:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:32:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000240)={0x401, 0x2a4, &(0x7f0000000140)="804f8383a2168517e389bd3d96e3fa93e9eeb28ed1587da5fce82b8d1fd950aecd9ae33d977bb15e395fd6ba2472357614650f53e9a71c49c0abdfd43f17e9400452e7a55152cde3ec6269c514d39f933d4caf356ecbe525c8c93ee4d867af9ce763c28538082143c13ecd5719f3508ff70a7dde649dff", &(0x7f0000000200)="64069d8a9ae15efe40895046adcaf38943b299358605d2024fe98cb1b3519ada6e9044b7460ecde82c28604e", 0x77, 0x2c}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r4 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r9) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r9, 0x1) recvmsg(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r10, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r10, 0x1) recvmsg(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000380)=0xf273519aa2c90c2) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r12 = dup(r11) ioctl$int_in(r12, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r12, 0x8048ae66, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r12, 0x0, 0x48a, &(0x7f0000000080)={0x400, 0x6, 0x9}, 0xc) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000400000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000001000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:57 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x1cd) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000004c0)='\'\xc4>\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2') syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000080)=""/48, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad66b6b30400fbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 01:32:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 630.681314][T26730] vivid-004: kernel_thread() failed 01:32:57 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000200)={0x1ff, 0x0, 0x10001, 0xf1, 0x0, 0x9}) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000002000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3ff, 0x0, 0x1}, 0x3c) 01:32:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r4 = open(&(0x7f0000000140)='./file0\x00', 0x8040, 0x0) r5 = gettid() r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = dup(r6) ioctl$int_in(r7, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000340)={r8, 0x81, 0xccef}, &(0x7f0000000380)=0x8) tee(r0, 0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x2, r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x9, 0x100000000}, r5, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000003f000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6d1948b629ae7ebb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000140)={0x1, 0x0, 0x0}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 01:32:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 01:32:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x4, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000040000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:58 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1478, 0x80, 0x81, 0x7, 0x1, 0x1, 0x6}, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8a81, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1b, "a61696a462c853151dc5891afd60d4f24ed63e771bb881160b4f77"}, &(0x7f0000000180)=0x3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x5, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x2, 0x101, 0xff, 0xaf, 0x7, 0x6}) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:32:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000007fffffff000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:32:59 executing program 4: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xc7}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 01:32:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x6, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:32:59 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000012c0)={&(0x7f0000000000)=""/4096, 0x208000, 0x800}, 0x18) pipe(0x0) close(0xffffffffffffffff) accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0xa, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001080)) accept$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYRES32], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket(0x0, 0xa, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000003100)) [ 633.190697][T26775] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:33:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6d1948b629ae7ebb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000140)={0x1, 0x0, 0x0}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 01:33:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x7, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000010000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) memfd_create(&(0x7f0000000040)='/dev/swradio#\x00', 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xb) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6d1948b629ae7ebb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40400, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000140)={0x1, 0x2d, &(0x7f0000000100)="9e126210703d13b428aeb248bd817bfeb2e8cb4e7989864844af505aabc6982285b77f67e32f9f913d4c9fc9b0"}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 01:33:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000020000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)={0x80, 0x0, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) 01:33:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000000000003f0000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x6d1948b629ae7ebb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000140)={0x1, 0x0, 0x0}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 01:33:01 executing program 4: r0 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) pread64(r0, 0x0, 0x2d3, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9205, &(0x7f0000000240)={0x0, &(0x7f0000000200)=""/34, 0x22}) 01:33:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x4, 0x0, 0x4, 0x9}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getresgid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)=0x0) setgid(r2) 01:33:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/dev/swradio#\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000400000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0xc, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000007fffffff0000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0xd, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0xe, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000ffffffff0000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x10, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 635.257821][T26903] vivid-000: kernel_thread() failed 01:33:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$cgroup_type(r1, 0x0, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 01:33:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 01:33:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000ffffffffffffffff0000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000140)={[{0x1, 0xfffffffffffffbff, 0x8, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0x80000000, 0x5, 0x5, 0x2, 0x4, 0xde4, 0x5}, {0x8, 0x0, 0x3, 0x7, 0x5, 0x1, 0x1, 0x1, 0xfffffffffffffffe, 0x8, 0x1, 0x80000001, 0x8}, {0x0, 0xffffffffffffff80, 0x8000, 0x40, 0x101, 0x100, 0x5, 0x9, 0x6, 0x100000000, 0x1ff, 0xb7, 0x1}], 0x8000}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x1000200) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x21440, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x1a, @remote, 0x8}, 0x1c) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r4 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6612) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r9}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000026c0)={r9, 0x6, 0x0, 0x1, 0xa43}, &(0x7f0000002700)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={r9, 0xe8, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x7e82, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2b8}, @in={0x2, 0x4e21, @rand_addr=0x400}, @in6={0xa, 0x4e22, 0x10001, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x8000, @mcast1, 0x7f}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x80000001}, @in6={0xa, 0x4e21, 0x7f, @dev={0xfe, 0x80, [], 0x2a}, 0x1ff}, @in6={0xa, 0x4e23, 0xb675, @dev={0xfe, 0x80, [], 0x1e}, 0x80000000}]}, &(0x7f00000003c0)=0x10) ioctl$EXT4_IOC_MIGRATE(r6, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r3, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r5, @ANYBLOB="20000000000000008400000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f03001800000000000000840000000500000000000000030000002000000000000000840000000800000000000000000000000000ffffffffffff1800000000000000840000000500000030000000faffffff2000000000000000840000000200000000001180ff01000009000000", @ANYRES32=r10, @ANYBLOB="00000000000000008400000002000000060000800500000000000000"], 0x130, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r5, 0xa0, &(0x7f0000000200)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x2f, @ipv4={[], [], @broadcast}, 0x7}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e22, 0x3a144398, @empty}, @in6={0xa, 0x4e21, 0x80000000, @loopback, 0x7}]}, &(0x7f0000000080)=0x10) 01:33:02 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x4c, 0x0}) 01:33:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000020000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xb) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d1948b629ae7ebb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40400, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000140)={0x0, 0x34, &(0x7f0000000100)="9e126210703d13b428aeb248bd817bfeb2e8cb4e7989864844af505aabc6982285b77f67e32f9f913d4c9fc9b091f0d54b4e63b6"}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) [ 635.872057][T26977] debugfs: File '26968' in directory 'proc' already present! [ 635.945321][T26977] debugfs: File '26968' in directory 'proc' already present! 01:33:02 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="007186dd07"], 0x90ad) 01:33:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000003f00000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 636.242265][T26993] device nr0 entered promiscuous mode [ 636.285174][T26950] vivid-004: kernel_thread() failed 01:33:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:03 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000080)=""/14) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r4, 0x400c4301, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 636.768044][T26993] device nr0 entered promiscuous mode 01:33:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0xfdd3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0x80, @mcast1, 0x2}}, [0x1000, 0x0, 0x1, 0x7, 0x2, 0xd08, 0x6ca3, 0x100, 0xe59, 0x5, 0x80, 0x8, 0x1, 0xaec6, 0x1]}, &(0x7f0000000140)=0x100) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x8000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000400)={0x3f, 0x54, "00b184d36ec6a26659317e0f823a82b63b70cc80231580460fea40ccd65679ff371eadf2584dca2fa3b6dbbabebfc07317eb95db3910814e935b677034bdaed08951a9250fdda982e3fc5e86964f281851634d39"}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r4) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000180)=0x6) 01:33:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000004000000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:04 executing program 1: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x5f) 01:33:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b0f, &(0x7f0000000000)='wlan1\x00\xd8\xe9\x86\x10\xa3\x01Oj\x00\x05\xa0\xd9\xc2\xd9\xe5\x91:\xb6\xd1#[\x16]l\xb3b\xaf \x00\xbb\xec*\x17\xe0\xd2c\x04\xa6/\xb9\xd7 r\xe2u*\t\x19i\x90\x0f\xf2Z\xeb\x8bF\xabo0\xc7\x95E(b\x8b\xfc\xed\xcc\xaa\xbc\x107\xdc\x93\xf14T\x01\x99T\x93\x96\xb1\xa9\xbe\x1a9\x1feu\xe6\xde\x84W,v\xc2Y)\x0e\xa2\x16n\xa3\xc7\xfa\x00\xf3&\x00X\xd6\xc0\x01\x01\xaf\xb3?f(\xce\xa2\xfc\xa5\xf1\xd5\xce\aom\trq#\x87\xe6\v&QP\xf9\xdc\xc0\xfc\\kc\xeb\xb5\xcf\x96\xb9\x18+\xe4fs3I\v7^\x81\x16I\x88\xdd}\xcaa\xc6p\xd2P\xff\x02\x03F\xd5\xe8\xcf\xf1\xffE\x91m:\x9ax\x11\xfa\xbdI\x80\xed[\xfd\xde') 01:33:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) fremovexattr(r4, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_REGISTER(r2, 0x400c4301, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x100) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000200)={0x4, 0x6, 0x6, 0x0, 0x12}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x76, 0x800) ioctl$VIDIOC_RESERVED(r6, 0x5601, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) 01:33:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000010000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:33:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:04 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:33:04 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 01:33:04 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) 01:33:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000020000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) 01:33:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000003f0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:05 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) 01:33:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000400000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000007fffffff0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) 01:33:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000100010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x104, 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0xffffffffffffffc1) 01:33:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000200010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000003f00010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) 01:33:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000004000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000012c0)={&(0x7f0000000000)=""/4096, 0x208000, 0x800}, 0x18) close(0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, &(0x7f0000000f40)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 01:33:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000300)={@random="31dd9638e37f", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @remote, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 01:33:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000007fffffff00010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000300)={@random="31dd9638e37f", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2f, 0x0, @remote, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 01:33:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000000000ffffffff00010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:08 executing program 4: dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='uid_map\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:33:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:08 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 01:33:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000ffffffffffffffff00010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffffffffe, 0x0) 01:33:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:08 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0xfdbd) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f00000037c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7a8a295b90bf9cc8578ec03a10c48d40101080a2f858ad2c4aa592d", 0x48}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 01:33:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000200000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:09 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = accept$unix(r5, &(0x7f0000000140), &(0x7f0000000080)=0x6e) sendfile(r6, r3, &(0x7f00000000c0)=0xf17ffd, 0xfffffffffffffffd) ioctl$CAPI_INSTALLED(r1, 0x80024322) 01:33:09 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) 01:33:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:09 executing program 1: 01:33:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000003f000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:09 executing program 4: 01:33:09 executing program 1: 01:33:09 executing program 4: 01:33:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000040000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:09 executing program 1: 01:33:09 executing program 4: 01:33:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:10 executing program 1: 01:33:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000100000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:10 executing program 4: 01:33:10 executing program 1: 01:33:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:10 executing program 4: 01:33:10 executing program 1: 01:33:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:10 executing program 4: 01:33:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000200000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:10 executing program 1: 01:33:10 executing program 4: 01:33:10 executing program 1: 01:33:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000003f00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:11 executing program 4: 01:33:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:11 executing program 1: 01:33:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:11 executing program 4: 01:33:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000004000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:11 executing program 1: 01:33:11 executing program 4: 01:33:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x101000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = dup(r4) ioctl$int_in(r5, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f0000000600)={0x0, 0xe, 0x6, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=0x3}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, r6, 0x0, 0xd, &(0x7f00000004c0)='/dev/net/tun\x00', r7}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=r7, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r5, 0x0, 0x4, &(0x7f0000000380)='-!!\x00', r7}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000440)={{0x7, 0x4, 0x100000000, 0x0, 'syz1\x00', 0xfffffffffffffff8}, 0x5, 0x8, 0x2, r8, 0x1, 0x33a, 'syz0\x00', &(0x7f0000000400)=['\\vmnet0?\'`@{,vmnet1em0user\x00'], 0x1b, [], [0x100, 0xff, 0x8001]}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x91, 0x10000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r11 = dup(r10) ioctl$int_in(r11, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r11, 0x8048ae66, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000180)=r11) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r9, &(0x7f0000000200)=[{{}, 0x13, 0x2b, 0x7}, {{0x77359400}, 0x17, 0x1000, 0x2}, {{r12, r13/1000+30000}, 0x5, 0x1, 0x9698}, {{r14, r15/1000+10000}, 0x16, 0x9, 0x1}], 0x60) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r16 = dup(r2) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x3f) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r16, 0x8048ae66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3048c}, 0x0, 0x0, r16, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:11 executing program 4: 01:33:11 executing program 1: 01:33:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000007fffffff00000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:11 executing program 4: 01:33:11 executing program 1: 01:33:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000001010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:12 executing program 4: 01:33:12 executing program 1: 01:33:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 01:33:12 executing program 1: 01:33:12 executing program 4: 01:33:12 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = dup(r2) ioctl$int_in(r3, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x5, 0x4) r5 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6612) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x8, 0x10, 0x7, 0x1}, &(0x7f0000002680)=0x18) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r9) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000140)=0x4) sendmsg$inet_sctp(r4, &(0x7f0000002840)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000025c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000084000000020000007eb99fac1192fb0000058007000000020000000000000000755a214f8601fbaf5c0b3fee12a06341a39e3200b604188847522d3d5ce8b7e8625de5be97460e6ddc3473c88f8e8d35477195a40ffac742e43240945c2e7686", @ANYRES32=r6, @ANYBLOB="20000000000000008444d9e7373600000008000000103003d4bf5ec381b3363d55e615711c1800000000000000840000000000000001000000ff0f0300180000050000000000000003000000200000000000000084000000080000000000000000080000000000000000840000000500000030000000faffffff20000000000000008400000002000000000011807f0100000900000036cb7ed7e0970fc5f1e3e863c6b80f324ce08f004411b1224b8684487513690b", @ANYRES32=r8, @ANYBLOB="000000000000000084000002000000060200800500000000000000"], 0x130, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r6, 0xfd, "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"}, &(0x7f0000000040)=0x105) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000002010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:12 executing program 1: 01:33:12 executing program 4: 01:33:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 01:33:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000000000000000003f010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:12 executing program 4: 01:33:12 executing program 1: 01:33:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:13 executing program 1: 01:33:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x2, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r1) ioctl$int_in(r2, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x40, &(0x7f0000000080)={@multicast1, @rand_addr=0x2}, 0x8) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x7) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r3, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 01:33:13 executing program 4: 01:33:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000000000000040010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:13 executing program 1: 01:33:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:13 executing program 1: 01:33:13 executing program 4: 01:33:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000000000007fffffff010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:13 executing program 4: 01:33:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:14 executing program 1: 01:33:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:14 executing program 4: 01:33:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000000000ffffffff010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:14 executing program 1: 01:33:14 executing program 4: 01:33:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x6, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:14 executing program 1: 01:33:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff020000000000ffffffffffffffff010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000040)="1451c2dcf1829e95e890dec70a4a528c852bebb599eea1f6e253a8a2195b5fc87938a36240e771eeb8ce50d282e5f783c68fb866a36bbffee979bee4053db7263d14ccc7f7ae") sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 01:33:15 executing program 4: 01:33:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x7, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:15 executing program 1: 01:33:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000002000000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:15 executing program 4: 01:33:15 executing program 1: 01:33:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x8, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff02000000000000003f0000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:15 executing program 4: 01:33:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x800000032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 01:33:16 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffefffffffffff9}, 0x0, 0x8) r0 = gettid() timer_create(0xfffffffbfffffffe, &(0x7f0000000240)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 01:33:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x300, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) 01:33:16 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000400)=0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x2, 0x10012, 0x3, r0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001000)=""/142) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000000c0)={0x1, {r2, r3+30000000}, 0x7f, 0x5}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x200, 0x6}}, 0x20) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000480)={0xde43, 0x5, 0x943}) write$FUSE_GETXATTR(r4, &(0x7f0000000100)={0x18, 0x0, 0x5, {0xfff}}, 0x18) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18080080}, 0xfffffffffffffef0, &(0x7f0000000640)={&(0x7f00000003c0)={0xffffffffffffffb1, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x100, 0x0) r5 = getpgrp(0x0) setpriority(0x0, r5, 0x80000ffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 01:33:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000c00c0000c0fe006031409210442900fe0000000000000000000000ff0200000000000000400000000000010003907800100000fe80f076aae29622aa97e913b248c6e30000000000f1ff0000000494006d899d00000000e68c91089bcf2792fb778020efed5bf16251d2e51f5d136000"], 0xff23) 01:33:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) ftruncate(r1, 0x1000000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x100) write$capi20_data(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000018087d20000030000000000000000cd"], 0x12) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d6, 0x8ad, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = dup(r3) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x9d39) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = dup(r5) ioctl$int_in(r6, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = dup(r7) ioctl$int_in(r8, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r10 = dup(r9) ioctl$int_in(r10, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r10, 0x8048ae66, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xfffffffffffffe9b) ioctl$KVM_SET_PIT(r8, 0x8048ae66, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r12 = dup(r11) ioctl$int_in(r12, 0xd48546bcf0d6c94, &(0x7f00000000c0)=0x9d3c) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r12, 0x8048ae66, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000040)=r12, 0x1) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) dup2(r4, r6) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 649.348850][T27593] ------------[ cut here ]------------ [ 649.354601][T27593] WARNING: CPU: 1 PID: 27593 at kernel/time/posix-cpu-timers.c:401 posix_cpu_timer_del+0x2f0/0x3b0 [ 649.365273][T27593] Kernel panic - not syncing: panic_on_warn set ... [ 649.371875][T27593] CPU: 1 PID: 27593 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 649.380972][T27593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.391031][T27593] Call Trace: [ 649.394333][T27593] dump_stack+0x172/0x1f0 [ 649.398673][T27593] ? posix_cpu_timer_del+0x2e0/0x3b0 [ 649.403963][T27593] panic+0x2dc/0x755 [ 649.407865][T27593] ? add_taint.cold+0x16/0x16 [ 649.412558][T27593] ? printk+0xba/0xed [ 649.416550][T27593] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 649.422021][T27593] ? __warn.cold+0x14/0x3c [ 649.426444][T27593] ? __warn+0xd9/0x1d0 [ 649.430522][T27593] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 649.435807][T27593] __warn.cold+0x2f/0x3c [ 649.435834][T27593] ? report_bug.cold+0x63/0xad [ 649.435849][T27593] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 649.435865][T27593] report_bug+0x289/0x300 [ 649.435895][T27593] do_error_trap+0x11b/0x200 [ 649.459136][T27593] do_invalid_op+0x37/0x50 [ 649.463551][T27593] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 649.468839][T27593] invalid_op+0x23/0x30 [ 649.472995][T27593] RIP: 0010:posix_cpu_timer_del+0x2f0/0x3b0 [ 649.478884][T27593] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 83 bb c8 00 00 00 00 74 16 e8 00 58 0d 00 <0f> 0b e9 87 fe ff ff e8 c4 38 48 00 e9 dd fd ff ff e8 ea 57 0d 00 [ 649.498491][T27593] RSP: 0018:ffff88805b627a30 EFLAGS: 00010093 [ 649.504559][T27593] RAX: ffff88805a876100 RBX: ffff888093a12e60 RCX: 1ffff1100b50ed32 [ 649.512533][T27593] RDX: 0000000000000000 RSI: ffffffff8164fe10 RDI: ffff888093a12f28 [ 649.520502][T27593] RBP: ffff88805b627ac0 R08: 0000000000000002 R09: ffff88805a876998 [ 649.528471][T27593] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: ffff88808d3e20c0 [ 649.536481][T27593] R13: 1ffff1100b6c4f47 R14: ffff88805b627a98 R15: ffff888093a12eb8 [ 649.544477][T27593] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 649.549775][T27593] ? lock_acquire+0x190/0x410 [ 649.554453][T27593] ? thread_cpu_clock_getres+0x90/0x90 [ 649.559920][T27593] ? thread_cpu_clock_getres+0x90/0x90 [ 649.565379][T27593] exit_itimers+0xdb/0x2e0 [ 649.569806][T27593] do_exit+0x1980/0x2e60 [ 649.574052][T27593] ? get_signal+0x392/0x2500 [ 649.578642][T27593] ? find_held_lock+0x35/0x130 [ 649.583407][T27593] ? get_signal+0x392/0x2500 [ 649.588002][T27593] ? mm_update_next_owner+0x640/0x640 [ 649.593381][T27593] ? lock_downgrade+0x920/0x920 [ 649.598237][T27593] ? _raw_spin_unlock_irq+0x28/0x90 [ 649.603435][T27593] ? get_signal+0x392/0x2500 [ 649.608035][T27593] ? _raw_spin_unlock_irq+0x28/0x90 [ 649.613238][T27593] do_group_exit+0x135/0x360 [ 649.617832][T27593] get_signal+0x47c/0x2500 [ 649.622254][T27593] ? lock_downgrade+0x920/0x920 [ 649.627118][T27593] do_signal+0x87/0x1700 [ 649.631360][T27593] ? __kasan_check_read+0x11/0x20 [ 649.636384][T27593] ? _copy_to_user+0x118/0x160 [ 649.641158][T27593] ? setup_sigcontext+0x7d0/0x7d0 01:33:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x500, 0x0, 0x0, 0x0, 0x0, [{0x401}]}}}) [ 649.646194][T27593] ? exit_to_usermode_loop+0x43/0x380 [ 649.651565][T27593] ? do_syscall_64+0x65f/0x760 [ 649.656335][T27593] ? exit_to_usermode_loop+0x43/0x380 [ 649.661712][T27593] ? lockdep_hardirqs_on+0x418/0x5d0 [ 649.667015][T27593] ? trace_hardirqs_on+0x67/0x240 [ 649.672048][T27593] exit_to_usermode_loop+0x286/0x380 [ 649.677451][T27593] do_syscall_64+0x65f/0x760 [ 649.682068][T27593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.687968][T27593] RIP: 0033:0x4598e9 [ 649.691847][T27593] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.711524][T27593] RSP: 002b:00007f148bfbecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.719933][T27593] RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 00000000004598e9 [ 649.727902][T27593] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 649.735877][T27593] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 649.743919][T27593] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 649.751874][T27593] R13: 00007ffc760bc6ff R14: 00007f148bfbf9c0 R15: 000000000075bfd4 [ 649.761716][T27593] Kernel Offset: disabled [ 649.766253][T27593] Rebooting in 86400 seconds..