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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000013c0)=@deltfilter={0x1cb0, 0x2d, 0x400, 0x200, 0x25dfdbff, {0x0, r7, {0xfffb, 0xfff2}, {0xffff, 0x4}, {0xf, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1f}, @filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x1c78, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x2, 0x3, 0x7, 0x4, 0x9, 0x15, 0x80000001, 0xb8, 0x9a, 0x200, 0xb5, 0x3098, 0x7ff, 0x1f, 0x3, 0x100000001, 0x9, 0x9, 0x2, 0x6, 0x6d93, 0x23d, 0x200, 0x0, 0x8000000, 0x40, 0x0, 0x3, 0x0, 0x3, 0x8, 0x0, 0xf9f2, 0x8000, 0xffffffffbb19d77b, 0xfffffffffffffffb, 0x4, 0x81, 0x0, 0x7fffffff, 0x5, 0xffffffffffffffc9, 0x20fb, 0x5f05, 0x0, 0x0, 0x7fffffff, 0x1ff, 0x0, 0x6d17a2a8, 0x6, 0x8, 0x100000000, 0x6, 0x8, 0xfa8, 0x2, 0x1, 0x0, 0x80, 0x3, 0x5, 0xfffffffffffffffe, 0x101, 0xab64, 0xb562, 0x7f, 0x3, 0x8, 0x100, 0x7, 0x9, 0x2, 0x155d, 0x10001, 0x8000000000, 0xfffffffffffffffc, 0xad70, 0x28, 0x3, 0xe566, 0x8, 0x9, 0x2, 0x0, 0x6, 0xff, 0xfff, 0x7ff, 0x1, 0x18, 0x2, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x5, 0xff, 0x401, 0x7fff, 0x100000000, 0xfffffffffffff763, 0x8, 0x7ff, 0x2, 0x7, 0x3, 0xf7, 0x8000, 0x1f, 0x4, 0x5, 0xffffffff, 0x0, 0x20a, 0x1, 0x7fffffff, 0x6, 0x5, 0x80, 0x8, 0x10001, 0x8, 0x8, 0x9d25, 0xffffffff, 0x9, 0x0, 0x7ff, 0xfffffffffffffffe, 0x100, 0x0, 0x9, 0x8, 0x0, 0x7b5, 0x9, 0x93, 0x2, 0x2, 0x0, 0x7fff, 0x1, 0x8ab6, 0x7fffffff, 0x7, 0x9, 0x7c, 0x27f6, 0x2913, 0x800, 0x4, 0x1, 0x8, 0x3d502418, 0x7ff, 0x3, 0x3, 0x3, 0x5, 0x2, 0x100000001, 0x2, 0x7, 0x3, 0x4, 0x4b2d0dcc, 0x3, 0x10000, 0x2, 0x1, 0x3, 0x80000001, 0x1000, 0x8000, 0x3f, 0x1, 0x8, 0x2b7, 0x48, 0x3, 0x100, 0x9, 0x1e4, 0x800, 0x5, 0x0, 0x2, 0x100, 0x9, 0x2, 0x6, 0x4, 0x0, 0x63ca, 0x10000, 0x20, 0x9b39, 0x0, 0x9, 0xfff, 0x2, 0x1, 0x90a0, 0xfff, 0x11a, 0xfffffffffffff800, 0x0, 0x37d, 0x8, 0x6, 0x7, 0x0, 0x0, 0xfff, 0x1, 0x1, 0x0, 0x1, 0x100000001, 0xcee6, 0x2, 0x4, 0xfffffffffffffff8, 0xb68, 0x8, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x5, 0x9, 0x8, 0x100000001, 0x4000000000000, 0xfc7, 0x4, 0x2, 0x80000001, 0x5, 0x0, 0x4, 0x5, 0x2, 0x1, 0x5, 0x6, 0x0, 0xffffffff, 0xc71, 0x1, 0x2, 0xffffffffffffffe0, 0x200, 0x80000000, 0x81, 0x7fffffff]}}, @TCA_ROUTE4_ACT={0x1040, 0x6, @m_connmark={0x103c, 0x20, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x22, 0x0, 0x10000002, 0x5, 0x7}}}}, {0x1004, 0x6, "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"}}}}, @TCA_ROUTE4_POLICE={0x408, 0x5, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0x8, 0xff, 0x0, 0x7f, 0xffffffffffffff11, 0xae9, 0x7, 0x3, 0x5, 0x2, 0x3, 0x2, 0x101, 0x10001, 0x9e, 0x5, 0x2, 0x78e9d3a1, 0x4, 0x408000000000, 0x3, 0xcf5, 0xca4, 0xffff000000000000, 0x9, 0x7, 0x1, 0x41e9, 0xfff, 0x3, 0x100000000, 0x2, 0x0, 0x3, 0x5, 0x7, 0x7, 0x401, 0x3, 0xfffffffffffffff8, 0x2, 0x1, 0xd08, 0xe5, 0x1, 0x5b8b, 0x1000, 0x1f, 0x10000, 0x9, 0x6, 0x8000, 0x6, 0x7b1e213d, 0x2f, 0xffffffff80000000, 0x22a, 0xb0e7, 0x6f0, 0x7f, 0xff, 0xfffffffffffffff9, 0x3, 0x10001, 0x2, 0x40, 0x8, 0x4, 0x8cdf, 0x42d, 0x7fffffff, 0x9, 0x100000001, 0xd2, 0x1ff, 0x100, 0xa6e, 0x1ff, 0x8, 0x1, 0x10001, 0x83, 0x800, 0x1ab6, 0x80000001, 0x2, 0x3, 0x13, 0x1f, 0x3, 0xff, 0x3, 0x1, 0x4, 0x657f, 0x4a37, 0xfffffffffffffbff, 0x8cf, 0x80000000, 0x9, 0x2, 0x6, 0x6, 0x1, 0x10000, 0x101, 0x3ff, 0x9, 0xff, 0x2, 0x7b2, 0xe, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x8, 0x5, 0x5, 0x3, 0x81, 0x1, 0x3, 0x20, 0x80000000, 0x0, 0x93e, 0x1d, 0x3, 0x3, 0x8, 0x5, 0x2, 0x4, 0x7ff, 0x100, 0x4, 0x94, 0x49e4, 0x7, 0x1ff, 0x1, 0x8, 0x8001, 0x8, 0x81, 0xf5e, 0x5, 0x401, 0x7, 0x9, 0xef, 0x5, 0x539, 0xfffffffffffff6ff, 0x401, 0x9, 0x9, 0x7, 0x0, 0x809, 0x2, 0x401, 0xfffffffffffffffc, 0x6, 0x1, 0x80, 0x8, 0x52f9, 0x972e, 0x1ff, 0xff, 0x9, 0x2, 0x8, 0x3, 0x7, 0x20, 0x7fffffff, 0x1f, 0x6, 0x0, 0x8, 0x4, 0x8, 0x401, 0x0, 0x7fffffff, 0x1000, 0x4, 0x80000001, 0x80, 0x1, 0x101, 0x4, 0x0, 0x1, 0x200, 0x42, 0x1, 0x3, 0x7, 0x9, 0x1, 0x2, 0x1, 0xb5, 0xfffffffffffffffa, 0x4, 0x319, 0x6, 0xfffffffffffffe00, 0xf0, 0x1, 0xffffffff, 0xaa40, 0x7, 0x1, 0xfffffffffffffff9, 0x0, 0x47b, 0x200, 0x7, 0x3, 0x6, 0x7fff, 0x0, 0x4, 0x8, 0x100, 0xff, 0x0, 0x2, 0x81, 0x400, 0x8, 0x6, 0x12, 0x100, 0x3, 0x4, 0x0, 0x2, 0x8, 0x200000000000, 0x2, 0x100000001, 0x1f, 0x0, 0x100, 0x8, 0x3c0, 0x5, 0x80, 0x101]}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x81}, @TCA_ROUTE4_IIF={0x14, 0x4, 'ip6gretap0\x00'}, @TCA_ROUTE4_POLICE={0x408, 0x5, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0xb7f2, 0x277b, 0x8, 0xff, 0x2, 0x3f, 0x81, 0x1, 0x4, 0x8, 0x10000, 0x80, 0x6f2, 0x5, 0x0, 0x3, 0x5, 0x9eb7, 0x6, 0xfffffffffffffff8, 0xfff, 0x9, 0x3, 0x1, 0x8001, 0x0, 0xe3, 0x8, 0xffffffffffffff01, 0x4, 0x0, 0x400, 0xfff, 0x2, 0x8, 0x2, 0x1, 0x7, 0x9, 0x5, 0x7, 0x3ff, 0x9, 0x602a, 0x8, 0xffffffff, 0x6, 0x2b9, 0x9, 0x38f, 0x3, 0x80000000, 0x9, 0x100000001, 0x7, 0xdf, 0xb87, 0x2, 0xfffffffffffffffa, 0x84b, 0x7, 0xc753, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x96b, 0x2, 0x0, 0x3, 0x81, 0x5, 0xa3, 0x8, 0x44aa, 0x8, 0x0, 0x101, 0x101, 0x4, 0x0, 0x7, 0x800, 0x1f, 0x0, 0x8, 0x8, 0x29a, 0x3f, 0x5, 0x8001, 0x8, 0xffffffffffff0c7e, 0x1, 0x3, 0x4, 0x3f, 0xc000, 0x4, 0x6a, 0xd3, 0xfffffffffffffffd, 0x8, 0x9, 0x3e5, 0x3, 0x3, 0x3, 0x4, 0x8, 0x9, 0x766, 0x8, 0x2, 0x8, 0x4, 0x7, 0x6, 0x400, 0x1, 0x100000000, 0x0, 0x0, 0xbab9, 0xd54, 0x8, 0xc79, 0x8001, 0x1, 0x7f, 0x2, 0x3, 0xfff, 0xff, 0x6, 0x3ff, 0x9, 0xbba6, 0x4dc, 0x7, 0x2650, 0x9, 0x9f, 0x8, 0x9, 0x4, 0x6, 0x7, 0x4, 0x2, 0x2, 0x4, 0x743f, 0x41d9, 0x80000000, 0x60000, 0x6, 0x5, 0x1, 0x8, 0x7, 0x7f, 0x313f, 0x7ff, 0x9, 0xff, 0x0, 0x4, 0x3, 0x80000001, 0xffff, 0x0, 0x3ff, 0x9, 0x3, 0xe3, 0x7, 0x1, 0x58, 0x9, 0x60000000, 0x5, 0x1, 0xdda, 0x1f, 0x6, 0x3ff, 0x3, 0xa989, 0x1, 0x8, 0x5, 0x80000001, 0x401, 0x53b4, 0x6, 0x1, 0x9, 0x8, 0x2, 0x80000001, 0x16, 0x4, 0x3ff, 0x3, 0x7f, 0x1, 0x5, 0x71, 0x7, 0xff, 0x100, 0x2000000000000, 0x80000000, 0x9, 0xfff, 0x7, 0x9, 0x0, 0xfff, 0x7, 0x2, 0x3, 0x5, 0x5, 0x100000000, 0xd9c9, 0x7, 0x7, 0x3, 0x7, 0xffffffff, 0x6, 0x4, 0x200, 0x1ff, 0x6, 0x200, 0x8, 0x81, 0x4, 0xff, 0x3ff, 0xff, 0x1, 0x7, 0xa8, 0x100, 0x10001, 0xffff, 0x4, 0x2, 0x1, 0x2ff, 0x4]}}]}}]}, 0x1cb0}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:35 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x8, 0x20, &(0x7f0000000080)="c4c630b5043d3c0d8d30577674f5836272b7d3e493df7fb69e806eb397a070f58e77bc37006b79da939c03c941a8d66b35db6863296388d316a752da2e89b5a83a64d2a4", {0x0, 0x7, 0x3673575e, 0x1, 0x8, 0x0, 0x7, 0xb3}}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x2, &(0x7f0000000000)='}\x00'}, 0x30) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x400200) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="5bde8bead80645dafb7e380694c01c82", 0x10) [ 1187.207900] audit: type=1804 audit(1545611615.788:135): pid=1437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir569863790/syzkaller.5nMiOx/2265/bus" dev="sda1" ino=16574 res=1 00:33:36 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="f31433c6503816691e03134c6ed27cf1418949159f092aeb1bca7980e986d3c84b12eb1372a2c25bfeef9305f9efa3962c000000000000"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x80000) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/104, 0x68}], 0x8) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x53, "887fe076023c57f6e6689bfff7ff875abcbdf227a7cc8145d8a5ef1a65128a1c113edafd721fe23ce0027d6b0d942926c8504cf17e4571807f96c6b85ab15125213114a0500f7c62c46d01fba85b3f86bea80d"}, &(0x7f00000007c0)=0x5b) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000800)={0xfffffffffffffff7, 0x8008, 0x4, 0x7, r4}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x16}, 0x7}, r3}}, 0x38) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:33:36 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r6, &(0x7f0000000340)=""/39, 0x27, 0x3f000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) msgget$private(0x0, 0x15) r8 = msgget(0x3, 0x14c) msgrcv(r8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESHEX=r4], 0x2, 0xfffffffffffffffa, 0x3000) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r9, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) 00:33:36 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x100, @reserved}, 0xffffffffffffff8a) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x2, [0x8000000487]}) 00:33:36 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x4800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="004dfc755a64080000ff007462475d6d707fbb8ded6449508f9af75316f21e3ce8d53f"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sigaltstack(&(0x7f0000a11000/0x4000)=nil, &(0x7f0000000400)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={0x1}, &(0x7f0000000200), &(0x7f0000000280)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)) fsetxattr$security_smack_transmute(r0, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x1) [ 1187.948928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1187.980423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1188.122799] audit: type=1804 audit(1545611616.698:136): pid=1500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir569863790/syzkaller.5nMiOx/2266/bus" dev="sda1" ino=17585 res=1 [ 1188.217789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:33:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) sendfile(r0, r0, 0x0, 0x2000005) 00:33:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl(r0, 0x80, &(0x7f0000000080)="41f1e705aeb1ff8e6fcab1b9a45641717145f6f4a379e065b40d553d5550b70d540d901e55c1585525651eda18c6d4bd76e5b940e984e684cdf69e68d62742907a2c01cef148c650955874b8f240d72c6aced6d6bd802f6e617e8ce65eaf4e3d3e87e413c6605c4988362e9c59bac9af2b193859c1ff938d2ea39ed18bc4b250b647f49136c236abe3bbaffd299b644e12516cc01aae376df0907d717a0c8a05b79e69edf2857af453544ef3039891fcf2659ae66a2e8c764aa9c8253f6115fa7391b1943fd7beb0c117823f") ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:36 executing program 0: socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2001, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x1, 0x4, 0x1, 0x8000}, 0x2c) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xfe0415c907f8509d}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f0000bfa000/0x4000)=nil, 0x4000, 0x0) socket(0x9, 0x807, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000bf9000/0x3000)=nil, 0x3000, 0x0, 0x15, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4841) 00:33:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x40000000, [0x8000000487]}) 00:33:36 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) 00:33:36 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x100000000000003) lsetxattr$security_ima(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='security.ima\x00', &(0x7f00000009c0)=@sha1={0x1, "60eb7a0680bd10790bbc353f084a883216ed3b40"}, 0x15, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x1f, 0x80) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000700)=""/9) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x5, &(0x7f0000000f40)=[{&(0x7f00000002c0)="e10e1bccfa5b334765393efee85c16f93368e37714b569b45e2fa1a4efe5bddfcb69b5e3c7a15f079c15b2d1447a96ff4d361e99366dc71b180709d349b06eb1edb7ec55d451b8dfb2dd2fda8776a9a160581138da10ee6ae392ef831b8cbaa9bb65eea02217751c4ed0a88acafcae54d7319c", 0x73, 0x992}, {&(0x7f0000000c40)="aa9f3067adb3adbd7208134a0e5a537ff8295734fcea5655d431ec12aacf3caadb979772eda6cefd44f3ae47744ce3cbfca5f031cc133aa94a472b555c52c8d66ae7645357224bfd2e142da7d49619b38ceebbd7c4b39dfedb1397be729d4f13188730eef7b59e4e3034c972e335397ad2a8e1f7cb7b6324624ec909cf2c430c2c4984d260ec6f70b8ca413589a4f2cc148262bdc94521730802634038295692841c8230bdfc550302cf76b313c46c4f4c3dd237d59b3d258a95b49478ad8823ad6a6dc763dd26f9d6cab8ebfb0c7e581fc5d698ee8d62a2c851", 0xda, 0xffffffffffffffff}, {&(0x7f0000000d40)="cd064252436f5d7be6c443524464da013349da3c5e97292582ee5cfd0f5074374acdff23c4874a77f94da5e36b0dad0d53ba637909803a7e8c48a3ed467207cbcac54d6ca98556dbc4c233d37f29da514ad7d17ce74bca6342a1a1f3bf6883da7acc40a5e96601c3a1f7eba6bac379100190244db2b051f3d6d43000189e1bb97e1cf1fee9561a177c83175bcf4dc7383880e8b43c6b7542bef286e67764de74d445db11d3875bd56972cd4231eb606263eaf91eeba1dbaa99af78bf9c0d8819d7ed277ee2662cfe09e1f26754e1fb540c485984f81715676e1e74f83d24cb605c9da9cf78635afb20", 0xe9, 0x6}, {&(0x7f0000000340)="5284a5b4b3bb4b3f39a024dacc92a7e5b4bb87bed60fb7af5b8225675c036bd9cd451bf8bcf8cd8c1d8ab4290f233044b717107b9c65343ed85332d7930f9eab55e4036cebe0a05281cd9755511dfa65f9a88fb531e83218ae67d01a97e8d360dc02a05d5b1468e8ca48debf8d29e54040ebfae8f2049a9a0bcd6b9da2133fb5769b8e2f58e9acd468a1d29645eb2a27c4ae4e9656c5fa604e2a53282970d317a3d471c630d6", 0xa6, 0xd798}, {&(0x7f0000000e40)="077e2da7eab3ea8fa1be828b6796aa880eee2558ffdcb72831483729963eb885afe827321949af41b26204ae58e44ccd75eb029179259f9b59f40aee84cff30aaa9689b9c18af89ca89846a01e1c96dcbfc20c1d426c2927647298fe72d86793c2f55d7ff4f0d5e32b6d395c2f4f702bd52e8fc03950efd9b115aa84de3429d523491dc733abe15189d90066e15b05dff53c9b1050f9acec6177df4101d601887cddd937a4cc9b5e0026b61a28b6e9f25b4b5707a804b655b9adda5207d1a0671f55e3cdb9904eac0e9a2224682b19891a2758801b2a1c8968ca7bee164b", 0xde, 0x100000000}], 0x200000, &(0x7f0000000fc0)='vboxnet1\x00') msgrcv(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000840)={0x2, 0x0, 'client0\x00', 0xffffffff80000003, "c77add7395c96216", "eeb1176496d44e42bad8e92baeea06d7b4fb2c5410f36bdee948ff2d6a401cba", 0x1, 0x9}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000001000)=ANY=[@ANYBLOB="ec0100001a8cae1ccdb80a8cb0836579724ef68b31957dea0f411077c9b4d88b59c27eaf14d803fba3a64048a9fd9ad7840d1f8371b27aa3ca116368bf73d559ac91a122b3b4c458b6bd0873f25fd2f52e0448eb228f0fab7f92f0dbb7d0", @ANYRES16=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x6}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000680)={r8, 0xff, 0x9}, 0x8) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r9 = fcntl$getown(r6, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000000a00)={0x6}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x22}, 0x2) eventfd(0x2) 00:33:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x1b, r0, 0x0) 00:33:37 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0xffffff2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:37 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 00:33:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x14d564b, [0x8000000487]}) 00:33:37 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="f78934705186b5c106ae52eb2f37cdab77a6dda5c5c6efd79e88752b1b880da0c26eeb394219dfb0350e3de66f45c34695324514dd9dd8235873cf613a75f13f859fc57137b66d51df1f167c08751f8c507e5ea8813c76c3d603a50cf158c95071dabd50e3b0e6c95c56e1bb78fb036a093852c2dc474adc41eb2ce791befeb5b451400be739358046270945"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000200)={0x0, 0x80076, 0x0, 0x0, 0x12}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:37 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mincore(&(0x7f0000b01000/0x200000)=nil, 0x200000, &(0x7f0000000080)=""/81) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:37 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0x482842, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="49000000fc57d7922d752ae87dc3a7682b1f70791b1c8c780df53ec1cad746ee7074e1df19639182a3d414f1f854449ed19f63df20926258f495347fae1a68cb681bda7cc1975e08c156fb2553"], &(0x7f0000000700)=0x51) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000740)={r1, 0x4, 0x4, 0x4}, 0x10) getrlimit(0xf, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x478) r3 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x5, 0x400000) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x1000, 0x3f, 0x7, 0x0, 0x1ff, 0x6de, {0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x6}}, 0x0, 0x7f, 0x27d1, 0x7fff, 0x6}}, &(0x7f0000000580)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0xff}, &(0x7f0000000600)=0x8) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x91, 0x1, 0x2}}, 0x14) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 00:33:37 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r6, &(0x7f0000000340)=""/39, 0x27, 0x3f000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) msgget$private(0x0, 0x15) r8 = msgget(0x3, 0x14c) msgrcv(r8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESHEX=r4], 0x2, 0xfffffffffffffffa, 0x3000) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r9, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) 00:33:37 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000e3d000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 1188.820765] kernel msg: ebtables bug: please report to author: Wrong len argument 00:33:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x1100, [0x8000000487]}) 00:33:37 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES16=r2], &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="ae", 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001500)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001840)={{{@in6, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x53, r4}) mount(&(0x7f0000001700)=ANY=[@ANYBLOB="007f1573d05d13980f4e165ec37f13eeac19770865606c0de5c977090ed73d8c8863fc00ae7482aa6ad28ecc61b120d08cf42c5fb56051ff874a6aa56896da50956eae70647b6b54e06056000000000000000000b8501725698fcc7decafa18b8c8a9abf115670d5714ddba638a11b3269cd321482caf54cfe30d0de547089b177092fc89eaa6c5270b881480804356fde2715e40b1d67bd0bb2eac4a3b54e74624510542f139e243730b2b80238c3a4c968d07ccc136b0432220c514403147df7f8120f1e5f8339fc1852b56aab864692bf29999b758a00789bf323fe3855e8e2f6a9b46b068959e2bee5b9d735e5cf572d942d8e5448000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) getsockname$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f00000001c0)=0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000280)=r0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001d40)=ANY=[@ANYBLOB="08000000000000000a004e2401800000ff01000000000000000000000000000100f8ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e240300000000000000000000000000ffffac14142006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22c9000000fe8000000000000000000000000000bbe4010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000080fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2001000000ff020000000000000000000000000001ffffff7f0000000000000000000000a919ba016f23e688faf36d7e5f5e090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24090000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e243f000000ff02000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240800000000000000000000000000000000000001000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001de7662cf9fc2f899b34c9c3abf950ceb06ef37a5a086a23a9297eb8245bfd2de8d1d36561830b35620dfa4e2a19a944941fc4e99452b19a9dc375a4748f9e8fed373e1ddd72eccca62e4e5ff0432c35dc0b2bc62c238c57b9b98ae5e92f98309aeb"], 0x490) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xfffffffb, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000380)={0xfffffffffffffffe}) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) [ 1188.883071] kernel msg: ebtables bug: please report to author: Wrong len argument 00:33:37 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x94040a1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)={0x2ec, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9a}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x200, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x75a76785}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc85f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7821}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b74}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x89}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc702}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000c40)={0x13c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6522}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x32336cb0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf0c8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000600)={'sit0\x00', {0x2, 0x4e24, @loopback}}) eventfd(0x2) 00:33:37 executing program 3: r0 = socket(0xa, 0x805, 0x1) r1 = getuid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000180)=[r3, r3]) fchown(r0, r1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in=@remote, 0x4e24, 0x1, 0x4e21, 0x0, 0x2, 0xa0, 0xa0, 0x3f, r4, r2}, {0x5, 0x100000000, 0x424, 0x1, 0x32, 0x4, 0x100, 0x2}, {0x1, 0x65b, 0x9, 0x7}, 0x7fff, 0x6e6bb1, 0x0, 0x0, 0x3, 0x3}, {{@in=@broadcast, 0x4d6, 0xff}, 0x0, @in=@local, 0x3502, 0x7, 0x0, 0x4, 0x1, 0x7, 0x5}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 00:33:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) 00:33:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x17a, [0x8000000487]}) 00:33:37 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000001c0)={r1, 0x1}) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="51a7e254d75dbf4341f0ee3943df1e81473e7123740c3cadd1b0082fc123c883adfe122633566f92dd9753edc13083c58268ad5a59cd88cdb2abb1c36d8e8caa065a3d2c918ad2d039d83517fe87f23ec8af777514a7876bb056d7a9153741f6c1aa61aca446509f853f8e6f023fc1d5914255cea67f7e7cdfeb975ac2c87cd74d1fb7c8d197ffc71b4ec8a0e8ad20cded5bba50034580a386e4135dcd3172bf3cd5845acc6a9138976797a4845a00873a8589166584f75e88e5376db461d06eccd0e1fc1dd6a1c0ad2c8a551ccfa16a94f75f"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 1189.285546] QAT: Invalid ioctl [ 1189.339488] QAT: Invalid ioctl [ 1189.391540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1189.406969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:33:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:38 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xf9, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:38 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000a07000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 1189.757950] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1189.847931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:33:38 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)=',/vboxnet0\x00', 0xb, 0x1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:38 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r6, &(0x7f0000000340)=""/39, 0x27, 0x3f000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) msgget$private(0x0, 0x15) r8 = msgget(0x3, 0x14c) msgrcv(r8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESHEX=r4], 0x2, 0xfffffffffffffffa, 0x3000) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r9, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) 00:33:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x198, [0x8000000487]}) 00:33:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x22801, 0x100) sendfile(r0, r2, &(0x7f0000000080), 0x1) mq_timedsend(r1, &(0x7f00000000c0)="cc9d04a5729665cfdd413400f18de4ef42c67ff3bc74848efeff9daeedc8ba9ef2355f727ce9f10dd58950c122faa1b65f4f92edbd131a970203bf6add81b9720d500bcc75a23092129f61e09f8a3cf3f7b6337c812be22930a1be895c497e52d2b6477e12272f53c0180e45085245def705c46678ec8af5eae994396716394300b3585d3afc403b0a405207bb8cd794f6e507b2a7b160440b2150b8daf6548f60ec2e6e8d8e03fd30965d472b0ec438bdf2d2d168e2b1dbed61f2f18f945ddd9982230e5fd393ba82d8d5836b8dc07717e659df69c95e9b9e9be431b5959e0cc01ea2254062cd9b", 0xe8, 0x401, &(0x7f00000001c0)={0x0, 0x1c9c380}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000640)='em0@wlan0em1\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000c40)={0x0, @reserved}) getresuid(&(0x7f0000000700), &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000009c0)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000a00)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000c00)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000840)={0x9c, 0x1c, 0x20, 0x70bd28, 0x25dfdbfc, "", [@nested={0xc, 0x17, [@typed={0x8, 0x84, @u32=0x1}]}, @typed={0x8, 0x4f, @pid=r3}, @generic="9104ff617bf6f937d794f5b0527146bb01ce41efe84f8ab688a1738f43054eb5241a314bc63233a48ddf5f4770adbabfb76750f6553034fb87ed82495fd8599a6d2e2c658df7fbe7ed77177b2c77b42640e65270739f8f42e45ab7ca49b29878aaa0116de489b56676e96d84dbde1bed375b009b56dc1c"]}, 0x9c}, {&(0x7f00000013c0)={0x1174, 0x3d, 0x800, 0x70bd28, 0x25dfdbfb, "", [@generic="b016d71fd9748d06d140692d", @generic="fd280000ef86986b20950530e9cba5f64b6070918c98d84a6dc7e6101df1e88a6da52800be69443cee0bcf10097b5f3ba5543a28851b8abbe7566efa8f0b8cda03ef2ecf04f0546f7e8a8a3e4b597a9b546db7bc2080c6fb3ac5165ed6da2ae0db", @generic="0805d03b7a0a45ee8f0b858ad51c558b96111b1201d14fe6cf0983face88e14153", @generic, @typed={0x8, 0x44, @pid=r4}, @nested={0x101c, 0x65, [@typed={0x8, 0x60, @uid=r5}, @generic="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", @typed={0x4, 0x41}, @typed={0x8, 0x95, @pid=r7}, @typed={0x4, 0x1d}]}, @typed={0x8, 0x78, @pid=r8}, @generic="6a341f2b5aa81495e9fabaa5637264485e11d83bdb416a0032d9cabc3b9dc90b7fec8cd7f40d1df48b289cba5a6b26dea5245393db2e4ddc5bcfed26e7a695c473694862d57a37b760bd4b7541a9298f16f15d4ccf10a64260bdfdf47470c49dd731e3cf5623d628f75a8f5e0d31a25536a68e23e7c8319242ce9ccae48dbac8d20dddfe45c3005e9b45b4db49516a5e3653db23daaf9c3d50b2b2e6582a1299de64b5e1b628021af4a6"]}, 0x1174}, {&(0x7f0000000a40)={0x1c, 0x18, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xc, 0x61, [@typed={0x8, 0x18, @u32=0x101}]}]}, 0x1c}, {&(0x7f0000000a80)={0xe8, 0x3b, 0x0, 0x70bd27, 0x25dfdbfe, "", [@typed={0xd8, 0x44, @binary="eeebb84118b3246cb43933a6da32dd392aff0c60108a0f44b08ec779de764544a63191fcd791c3fb02638cb0abbe63c200d1925029d03ad26197496814a90e8800ca1426901c854db9ad18b308ee0f74d753ae57fc69d092f78ff12c08c95f67b11de8265fca676636e7780f56a7f14e3dbc3fa18938ef61f0e905770ba3d8fc663e61eb623c6fdea1dbb24bbf8755a0822e2e2c214b1d37186cd59a049aeb834de5b8863c31f352782f7e860121494b9b4c1ef6161d9a0d48c96ed237ba0e3e03a2fdebb6d5b3656e6a75d68103dd5b1c8dca"}]}, 0xe8}], 0x4, &(0x7f0000000bc0)=[@rights={0x10}], 0x10, 0x10}, 0x20000000) clock_gettime(0x0, &(0x7f0000000900)) r9 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r9, &(0x7f0000000600)=ANY=[], 0xfec8) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r11, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = getegid() fchownat(r1, &(0x7f0000000d00)='./file0\x00', r6, r12, 0x1400) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r9, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:38 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:38 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) fgetxattr(r0, &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000240)=""/55, 0x37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) 00:33:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xcd, [0x8000000487]}) [ 1190.266716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:33:39 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x800) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0x7a, &(0x7f0000000100)="01ff8ca1ed03780f4b44449bd8d2a7391ea38fc3d23c4023afc87aeffb6258afc5473a37252501f464dfb55e4e2afcb50d5898a90d1683a64372f200b1ecd8442a8a4ddec0036baa6aeb7979c0339971dc4332f13594fc8947002fa28695afc8431ec5e523f15d06b240242914f667b102e425b99d79536357ba"}) socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x10000) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:33:39 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TIOCSTI(r0, 0x5412, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2000) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="ac1414aa7f00000100000000070000000900000000000000ac1414bbe0000002e0000002e0000002ac1414aa"], 0x2c) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ptrace$cont(0xffffffffffffffff, r2, 0x7, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x8001, 0x7fff, 0x5e, 0x3a00, 0x1ff, 0xe86, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x5, @mcast1, 0x7eb0}}, 0x7, 0xc6a, 0x1, 0xf8, 0x6}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @remote}}, 0x2c9a3318, 0x6a}, &(0x7f0000000300)=0x90) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000080)={[{0xff, 0x4, 0x5, 0xb9e2, 0x1438fd6, 0x5, 0x1bcfabcc, 0x5, 0x9, 0x6, 0x1, 0x8, 0xfffffffffffeffff}, {0x3, 0x1, 0x4, 0x8, 0xffffffffffffffc7, 0x6, 0xe8, 0x6, 0x7, 0xfc00, 0x10001, 0x8, 0x5}, {0x0, 0xfffffffffffffffb, 0x100000001, 0x1, 0xe2, 0x9, 0x9, 0x1834, 0x81, 0x5960000000, 0x8, 0x5, 0x80}], 0x1000}) 00:33:39 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r6, &(0x7f0000000340)=""/39, 0x27, 0x3f000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) msgget$private(0x0, 0x15) r8 = msgget(0x3, 0x14c) msgrcv(r8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRESHEX=r4], 0x2, 0xfffffffffffffffa, 0x3000) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r9, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) 00:33:39 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) 00:33:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x840000c0, [0x8000000487]}) 00:33:39 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0x76, 0x0, 0x200000000000000, 0x2}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:39 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000600)={0x3, 0x3f}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) signalfd(r0, &(0x7f0000000400)={0x7aca}, 0x8) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="300229bd7000fcdbdf2514000000100006000400020008000100ff0100002c0009000800020001000000080002000900000008000200020000000800020004000000080002007bfd4faa2245bf28ec619d5b9c01010038000400200001000a004e2454000000ff020000000000000000000000000001060000001400020002004e20f000000100000000000000002c0004001400010002004e237f00000100000000000000001400020002004e23000000000000000000000000380004001400010002004e22ac1414bb0000000000000000300002000a004e2300100000fe800000000000000000000000000012ffffff7f100001007564703a73797a320000000038000400200001000a004e2303000000fe80000000000000000000000000000a010000001400020002004e23ac1414bb000000000000000044000200080003001f000000080004000400000008000400080000000800020005000000080001000a000000080002000000000008000100200000000800010018000000100001007564703a73797a30000000003c000200080004008e00000008000200080000000800040006000000080001000c000000080001001700000008000407ff0700000800040000010000240002000800010014000000080003000900000008000100190000000800040004000000d5de533ef5dd337dbff28ed3a2d27a7d86977391501acfd7144a31dd0fed1da0684c65afa137669af3cf9ced50f3f5e8176c92df7afd3cc88d7df41561490ac838c3b531b40f971259ebad088d8bb8a47680f22a7006be47afdcdbe5935260f282e04ce1a1"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x80) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x580001c0, [0x8000000487]}) 00:33:39 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x3) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 1191.353854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:33:40 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r0}) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) creat(&(0x7f0000000100)='./file0\x00', 0x20) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x400, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) readahead(r2, 0x1, 0x78b) mincore(&(0x7f0000a21000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) fcntl$getown(r2, 0x9) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 00:33:40 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x800) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0x7a, &(0x7f0000000100)="01ff8ca1ed03780f4b44449bd8d2a7391ea38fc3d23c4023afc87aeffb6258afc5473a37252501f464dfb55e4e2afcb50d5898a90d1683a64372f200b1ecd8442a8a4ddec0036baa6aeb7979c0339971dc4332f13594fc8947002fa28695afc8431ec5e523f15d06b240242914f667b102e425b99d79536357ba"}) socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x10000) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:33:40 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)=',/vboxnet0\x00', 0xb, 0x1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xde010000, [0x8000000487]}) 00:33:40 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x8, 0x20, &(0x7f0000000080)="c4c630b5043d3c0d8d30577674f5836272b7d3e493df7fb69e806eb397a070f58e77bc37006b79da939c03c941a8d66b35db6863296388d316a752da2e89b5a83a64d2a4", {0x0, 0x7, 0x3673575e, 0x1, 0x8, 0x0, 0x7, 0xb3}}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:40 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000e40)=ANY=[@ANYPTR64=&(0x7f0000000dc0)=ANY=[@ANYPTR=&(0x7f0000000d00)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="ab57c67025c93f6ff3aecda2016b320a308f7d81e6dda6563a1fbe3ed478c856cd20df8b1dd984408913789a4f33372b7593bc1c84b092da52588a8ee7790fc4311bc36755417b2aff397dc7818f789ed19f4d0fec8c0c0451526d8bb69ab06ce22937347ae260579814bdb676554caa49aedf4f66355aaec6655ddff1f1f6cca9d229f09c98b4a24ffb9493", @ANYRESDEC=r0], @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=0x0], @ANYRES64=r0, @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYPTR64], 0x0, 0x0, 0x14, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x82240, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x3f, 0x3, [0x3, 0x34a9b04f, 0x1]}, &(0x7f00000005c0)=0xe) write$P9_RRENAMEAT(r2, &(0x7f0000000600)={0x7, 0x4b, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000006c0)=0x85) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000700)={r3, 0x1c3e, 0x1b, 0x3, 0x0, 0x8000, 0x1, 0xa000000000000, {r4, @in6={{0xa, 0x4e23, 0x29be, @remote, 0x100000000}}, 0x5, 0x418, 0x3, 0x2, 0xff}}, &(0x7f00000007c0)=0xb0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x3, 0x5, 0x1, 0x7}, 0x2c, [0x8, 0x40, 0x7, 0x6, 0xfffffffeffffffff, 0xffff, 0x6, 0x7a26, 0x100, 0x4, 0x2, 0x2, 0x1ff800000000000, 0x7, 0x121, 0x6, 0x6, 0xfffffffffffffffa, 0x3ff, 0x82, 0x5, 0xc, 0xfffffffffffffff8, 0x200, 0x9, 0x20, 0x0, 0x0, 0x6, 0x100000000, 0x3, 0x101, 0x4, 0x2, 0x4, 0x25881621, 0x7, 0x8, 0xbbc, 0x8f, 0x6, 0x7, 0x9, 0x9, 0x6, 0x666, 0x7, 0xfffffffffffff43a, 0x1, 0xffff, 0x2, 0x200, 0x7, 0x6, 0x200, 0x4, 0xff, 0x973, 0x1000, 0x0, 0x805, 0x81, 0x2, 0x5], [0x3f, 0x3, 0x1, 0x5, 0x37e6, 0x1ff, 0x6, 0x100, 0x0, 0x80, 0x280, 0xbcc, 0x80000001, 0x6, 0x7, 0x6, 0x1ff, 0x7fff, 0x4, 0x3, 0xf2, 0x401, 0x1, 0x2, 0x8, 0x80000000, 0x7, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x0, 0x7, 0x2, 0x7fff, 0xfffffffffffffffd, 0x8000, 0x3, 0x1, 0x2, 0xfffffffffffffff8, 0x0, 0x9, 0x4, 0x89, 0x3, 0x400, 0x8, 0x80, 0x8, 0x1, 0x7c, 0x0, 0xac0a, 0x8, 0x9, 0x4, 0x6, 0x1000000000, 0x7f, 0x6, 0x3ff], [0x3, 0x3f, 0x1, 0x3, 0x0, 0x80, 0x7fffffff, 0x5, 0x7c, 0x264c, 0xffff, 0xfffffffffffffffa, 0x80, 0x9, 0x8, 0x1000, 0x8, 0x1, 0x4, 0x1, 0x8, 0xe10, 0x5, 0x7fffffff, 0x2b43, 0x3, 0xffff, 0x400, 0x6, 0x4, 0xffffffffffff0000, 0x2, 0xc5e2, 0x5, 0x6, 0x1, 0x100000000, 0x0, 0x1000, 0x2, 0x8, 0x0, 0x2, 0x2, 0x88, 0x2, 0x8001, 0x53ef, 0x8, 0x8, 0x9, 0x4, 0x1, 0x100000001, 0x7, 0x1, 0x9, 0x0, 0x51ffb6ec, 0x6e0c, 0x4, 0x2, 0x6, 0x9], [0x9a, 0xfffffffffffffffe, 0x7ff, 0x9, 0x3, 0x100000001, 0x2, 0x4, 0xfff, 0x8, 0x9, 0x1000, 0x4, 0x3, 0x100, 0x7, 0x3e, 0x5, 0x0, 0x40, 0x8, 0x100000001, 0x1, 0x3, 0x8000, 0x8, 0x8, 0x6, 0xfffffffffffffe14, 0x7, 0x966, 0x550f, 0x8, 0x6, 0x5, 0x8, 0x80000001, 0x3ff, 0x374, 0x0, 0x5, 0x1, 0x0, 0x8, 0x8, 0x9, 0x2, 0x1000, 0x10000000000000, 0x8, 0x3, 0xa91, 0x7, 0x10001, 0x0, 0x7, 0x7, 0x1, 0x19, 0x4, 0x240013e2, 0x100, 0x8, 0x320f]}, 0x45c) chdir(&(0x7f0000000040)='./file0\x00') r6 = syz_open_dev$usb(&(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) 00:33:40 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xdb01, [0x8000000487]}) 00:33:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:40 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000006c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x2, &(0x7f0000000000)='}\x00'}, 0x30) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x400200) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="5bde8bead80645dafb7e380694c01c82", 0x10) 00:33:41 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="c881c679e2aa9ba6f69f56e9b612a54daca7f148f139e6507e0faa4d195501a386325a014f6bb337f808357dbdcca9fe6559c740f35b894a2b6a215742d9d7d17daea0f8408e818d7c78fa71361b85"], 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x8, 0x2, 0x1) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:41 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xff02000000000000, [0x8000000487]}) 00:33:41 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000f39000/0x2000)=nil, 0x2000, 0x1000000, 0x100030, r1, 0x0) 00:33:41 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x1db, [0x8000000487]}) 00:33:41 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:41 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="c881c679e2aa9ba6f69f56e9b612a54daca7f148f139e6507e0faa4d195501a386325a014f6bb337f808357dbdcca9fe6559c740f35b894a2b6a215742d9d7d17daea0f8408e818d7c78fa71361b85"], 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x8, 0x2, 0x1) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:41 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x130) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0xfffffffffffffffe, 0x1000000000076, 0x800000000006, 0x2, 0x0, 0x781}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0x21}, 0x7}}, 0x1, 0xa445}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0xdbde, 0x8}, &(0x7f0000000280)=0x8) 00:33:41 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:41 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:41 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4ae3, &(0x7f0000000000)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x8, 0xcf54, "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", 0xd9, 0x1d, 0x5, 0x9, 0x6, 0xe143, 0x100000000}, r2}}, 0x128) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000bd1000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r3, 0x8000000000000) 00:33:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc001001b, [0x8000000487]}) 00:33:41 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="d61c9907"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:41 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000640)={0x1f, 0x4, {0x4, 0x80000000, 0x8, 0xfffffffffffffffd, 0x800, 0x81}, 0xdb7, 0x3}, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000f40)) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000680)='aegis128-generic\x00') r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$alg(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)="28681679d53153ece7ad7cb4a059e1045deebf403777670d5a850ce64269126930e9e19e5713d9117990d3", 0x2b}, {&(0x7f0000000940)="32a9f2b43c31cbfa3eaea99fc6e15c9ef639eee91faecc047f1e96d52a5d6e04477d8de342dd24d1f0d1272deefb3b25c1342252f257b434c9f63612872d30ffaf36a78d2a63a500d297a40c318bb6298eeb251d16d91f136591af80dab126db787653388c2bac9d09369750f2cdf87985eb874b4ec2fd218f26a30d1c824893f4f16820aff66b8012a08d0b79fc523897535e0ae59dce142f3d83a420ef529ef713dbc88d3180b05994ea3a1b2d92547d02673d08a01da94c7647c887bec7477626473c7ce07202f0569028d3939bbf73221925b28caa67ede66b8927db0e9a3beba4e5", 0xe4}, {&(0x7f0000000a40)="a4d5055b2f22cf30c6c61872e29e4ecad0ded110c64858120c3be8488328d77b8b919804086375f79261b94065458c4b9bd153f8db7dd6ce793e5f855398c0e5339e73ee32c37b5163ed5ee91fc3bcdb619a7e4f1c434f4446eef9f8d783a6665f4723e1e31a15b8e9a326b699b79a6a6448827480f1c4de171b11cb72feb71bcfca99e05aa320714ec8da8a02303dd0618e1eb8bdf214f4401889f72679465a0005297e53b71a1035f0e6d0adcf99ac6818d708abef6ad02f1eb1c73a3e422dac5f42adc0f47a63eb9713133c6fd76386d3bc4ce81408484ea2503b486048b1e04435275ca14a95", 0xe8}, {&(0x7f0000000840)="e0b5cc435936140d57fb2f51c2d8ac69d099392fde0231d1c42fa09f1eced9262f085be91b0b97e76a05aa3dfcdfc96d7ae074aeedde7989eca2fa8483b51c5264596863a4e982095a5a24e6c38870a13fa96b260637a57acadb56c3fa65a567c89ccd6ef2381f86206be763d433684a4da95ffb34426ef4045b0286b957b01fe3da75dbba4070c1b3b50932f9eb9296daf3ca8394a912f2223a614e63", 0x9d}, {&(0x7f00000006c0)="fbeb20cbbb9bed606f0a", 0xa}, {&(0x7f0000000700)="b8cc55bdcce0550fc032b54ba6b82e3ab5753bdcea7e2e7a24f73b3b0580e81ac06c9773", 0x24}, {&(0x7f0000000b40)="9a7fffbde43937a5935f1b44cfdd135d56923d0ec287721b56db62ea4ca0681c756cbd6a0d3fb60d81cd392a9c8a0b5d694107e84244deeadd8acd7dbe90ac38c36bd7a219d1f88189592c0b73b53708440e40b576e51ef23d16e2b5efbd39dc9a759f812186323c917ae231ab828192583955c0", 0x74}, {&(0x7f0000000bc0)="c1cbf9dc648ee039da65954013322eedc0a636ab8ac6f235168ef31d1104f1b6645d3651494d50a8b512c83d7bb6433a182a9b4bdb2decf82acb12147fbb4cb41593f53ff8a20bb1f1664bd974ca172a01c45ba5d3fc2080161e66fc0bcd9f10", 0x60}, {&(0x7f0000000c40)="34d65d93ab05fe5a0edc93328608751217b6758189bbb6a93e82d28ff6fd7428af6d136090e58dc247d91f551a39d1bee723312b967bd8e201733dd6fe15bdaf71e6b6ce942f2d212c1e6866a8e36a1eb5eded7ddd387d038a7527ff53aa4e9957315115d0655d6f6a853bf95eef1fcd719e2a8d2958a0dc42df4d083cc9b1a80bf345b1f864b5a350ed756a5f81ded429f5f15e949c626d31ec6a368e7a8b33ca1e", 0xa2}, {&(0x7f0000000d00)="32739c6e7d1df4bef69ce096bd195b2493107aa3980e617fb098529f7b2400221419bfc5e240a590d533375d8052a83ac3c0aaafa880618036f8f408c5bca29be509449c0121b5d037cbb047a4510a6e56dae95533cfeefeed8935fce47d6846874ec4e1c6e623630b956c09fc722b029e3e1ee02f477a965b3bdd5c655fd47cbefd259d42ded415af5424489248883b4a25fd83fb8e288714256454c216fcae2b24ebd523ae9f2462ea0eb96cd2d69950ca1b819b291f78cc9b367373bacdd2ecf8b0b9d61ce02d8d60c3", 0xcb}], 0xa, 0x0, 0x0, 0x4044001}, 0x4000000) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:41 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:41 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x2) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) listen(r0, 0x200) 00:33:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0xb8}, &(0x7f00000001c0)=0x8) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x7, 0x810}, {0x20, 0x9}]}, 0x14, 0x1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000c33000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 00:33:42 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000f47000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:33:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x4000000000, [0x8000000487]}) 00:33:42 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:33:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x20400) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140), 0x4) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x400, 0x6, 0x1, 0x0, 0x2, 0x800, 0x2, 0x5, 0xfffffffffffffff7, 0x9, 0x10000, 0x9, 0x8, 0x1, 0x8000, 0xe5b, 0x8001, 0x80000000000, 0x8, 0xfffffffffffffff8, 0x400, 0x1, 0x3, 0x1934aa13, 0x0, 0xe00000000000, 0x6, 0x200, 0x100, 0x6, 0xffffffffffff8001, 0x3f, 0x2, 0xcb, 0x6, 0x0, 0xe5c, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x22, 0x7, 0x8, 0x7, 0x3f, 0x0, 0x52}, r1, 0x3, r1, 0x1) 00:33:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="6a07b17c24432643a99d17ff7b3f5fbe8f9a712f8ecef9c66b2c54e87a6b5c08ac8ad9dacf5a9213bf488ac98cef317bac426510facfb68adbcf335beba891eaab3abb5edfb5a808bfb1ef4cd263604e4f3f740c0f5b90c488324c57eb6fc0aee62e624907f8c7f2f81db2d13350fef52e5a8fc1768e68f35f"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x550001c0, [0x8000000487]}) 00:33:42 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="aa614f5d11fbd4d260b22e9ebee6c78e369752fe2af9403d267448b1e25abe4a7d5b5518547479da443da5aff2929512ae5bb2a766df0816bde465412b558610021ff3e40ee43808d7835da398ef2eea100ad5702486147f2fe2fbda64864ef1c2f5c293f177565bbf26fbd0b7bd9561c7a321fa036dd0b6fb6b6547dd4db62f908121dc36f249d69f37a7feef927f1c975da567340cc2d0482f10ba03a6208199a21ec36917a2b790ab1aaabb7c295f2efb3e23c54ff55f817e4d3562c2f88c6bc4eeb990fc0629e8b4"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000c17000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 00:33:42 executing program 0: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="9ea958ec549c7627e560abc3a1690c69bb"], 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x900) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:42 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xc) r1 = socket$inet6(0xa, 0x400000000000803, 0x4) ioctl(r1, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x3, 0x0, 0x1, [], &(0x7f0000000080)}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="f49c642085f2d86a086ed9ec3f9f042b3f350cbf83ea22efccc5c3125c2ab6c415f73e6820209f3280ea512792d51c36057a8bd99616b132c7798efbdc015a69f607789265fe0a43a2bc73f7a3ca0dfa09d5685e3ae0e55abddbe249717361761592d35e5cc6660a720fd2c6fd08e9dbe85712619b5b97619fb609ffdbe931599b41990513d007100c775fe385b530b049e5470484cc9b85dc482024ee3cce9d8ae602399a87237ca4992f534f10a568b9687997ae"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 00:33:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x10000000, [0x8000000487]}) 00:33:42 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x1000, 0x800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5c6, 0xfffffffffffffffb, 0xa4bb, 0x1ff, 0x40, 0x3, 0x3e, 0xb2, 0x2ba, 0x40, 0x2c5, 0x8, 0xfffffffffffffffa, 0x38, 0x1, 0x0, 0x400}, [{0x7, 0x3, 0x1, 0xd88, 0x0, 0x2, 0x1, 0x4}], "116f37b8cdc744e46a769435cabc42e13e15b36f56b393844e60f2d051d759851da08038188c54df21e8", [[], []]}, 0x2a2) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) 00:33:42 executing program 0: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="aa614f5d11fbd4d260b22e9ebee6c78e369752fe2af9403d267448b1e25abe4a7d5b5518547479da443da5aff2929512ae5bb2a766df0816bde465412b558610021ff3e40ee43808d7835da398ef2eea100ad5702486147f2fe2fbda64864ef1c2f5c293f177565bbf26fbd0b7bd9561c7a321fa036dd0b6fb6b6547dd4db62f908121dc36f249d69f37a7feef927f1c975da567340cc2d0482f10ba03a6208199a21ec36917a2b790ab1aaabb7c295f2efb3e23c54ff55f817e4d3562c2f88c6bc4eeb990fc0629e8b4"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000c17000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 00:33:42 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_delete(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x140, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x190}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fddbdf25160000000c00050008000100696200000c000900080001000024000024000280080001000300000008000200d500000008000100800000000800020004000000100004000c00010073797a31000000001800060008000100000001000400020008000100010400004c000900080002000100000008000200018000000800020009000000080001000900000008000200ffff0000080002004000000008000200060000000800010001010000080001000104000024000700080001000f0200c126241e8854ac9c00080002000600000008000200030000001400090008000100001000000800020009000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x11) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000780)=""/23) vmsplice(r3, &(0x7f0000000580)=[{&(0x7f0000000300)="5a6d4f44d7e8c4e60cbd287fd196cee7bef6883a5e590729ed166a79f2fd000716988f84fd766cda984d62e460755876f2cf39d45ff3a6f612cd018c6bcde335d79fb3b76c32a1ba8dcebc7a992ce723210768c123ede68784da6e0f8a40eed8f2a2cdfac2ea1d2f5e7bce10e7b0ede97ad9f7d2e02f099d491a834ce340478b973aa4b6ebf9ced45bb2557ae6fa3a0cc6b2c1d838d1f5045f2a", 0x9a}, {&(0x7f00000003c0)="38690a077f282cd50aab55ee665e69bbe88a02f645385489cd28718b0ea27ad6c5a046ffda5d6b24cb55b4bdb6e9b363f02ba57141b5b57cb43b93595de1c1cd076124c3c476e327129954bc0783a77f1ab7950bb1e355cccafe6efbf69f675c410ccbf9713c7c5c8bb59a923bb961c8a36b7fc8f3892bd1b82858546f82bc09e32f909ca0733c7a5dc2301c026942ed5c740a43bafa3fd10db16b66b812e6b2833cd955a491a00a75ccd4833e16b158b7f430b20b4f2d34143223724eda6bec09f51a7340292df37c343bd4060e0ed791", 0xd1}, {&(0x7f00000004c0)="3add475726c4b7fde5ebea2c45dae85b77bba2", 0x13}, {&(0x7f0000000500)="b37303b4e31c08b51626e77407590857a1c0b312ec5092dd4d", 0x19}, {&(0x7f0000000540)="c27957f35c33c3a17cfd23eb95968cb7c931e2850c45f9895aeb449ec2c23c837ce16f6d76dbc3bf5cdf7c8fca", 0x2d}], 0x5, 0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r4, 0x104, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x40800) 00:33:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) flistxattr(r0, &(0x7f0000000080)=""/235, 0xeb) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000180)=""/220) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000), 0x4) 00:33:43 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xce00, [0x8000000487]}) [ 1194.613626] Unknown ioctl 19307 00:33:43 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x200200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000140)={0x0, {0x3, 0x9}}) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="62e05493bcd8a99f3e3aa20d4840ac4e5abc5aabb2e85be9c1b60600fe806ee87b2a1c4910a31249adf0618cdb412a606cffb42b68d20c"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000a03000/0x3000)=nil, 0x3000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x100000000, 0x7fff, 0x2, 0x5, 0x0, 0xffff, 0x2, 0x7ff, 0xfffffffffffff202, 0x400, 0x5d}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x3000, 0x6003, 0x5, 0x4, 0x799d}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:33:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x2c00, [0x8000000487]}) 00:33:43 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="57836bf01fd51c5bd0aa51d369368b5575b97a424bd67c07000000000000003073fa752271d20a75aa2d1d4570d36c1644f29c735311a8313059810a68283f7d7f23b3dd46f7682c353245bf2d712fc8bb1774405621a27795c7fecac778b0e458f64a16a8095f9640f0ecce4aabd8d19a"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) write$nbd(r0, &(0x7f0000000080)={0x67446698, 0x0, 0x4, 0x1, 0x1, "9b1abe1a91f6d9c7a8a1df1637bd978cf577e37e093807dc718cf58dfa74a2a664180c46abbcfb2ddef8fa52bc6a283ce199350e309d584c6841607e270bfb14e3fb55afb40ab6c860fcb239fccd813b936bc4becf5e5805b4fc32c8a1110034dd36982b8d455be11c8b3b640b37f0940797c4c74d477db50dc7fc855218aa8e9ab6dd53db13b7d403fa2474d9c3a16f38451f84f2bf2a0e543ebb1c345160d7477f84df4e6d"}, 0xb6) 00:33:43 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000700)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:43 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc001102c, [0x8000000487]}) 00:33:43 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) iopl(0x6) 00:33:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x9, 0x4cc3, 0x2d01, 0xda, &(0x7f0000000400)=""/218, 0x6, &(0x7f0000000080)=""/6, 0x57, &(0x7f00000000c0)=""/87}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000380)={0x7, 0x7, 0x1}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb9a4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x9, 0x4cc3, 0x2d01, 0xda, &(0x7f0000000400)=""/218, 0x6, &(0x7f0000000080)=""/6, 0x57, &(0x7f00000000c0)=""/87}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000380)={0x7, 0x7, 0x1}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:44 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x9e, [0x8000000487]}) 00:33:44 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) 00:33:44 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x402000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="ba2ea5e770e6ed96f34a9649eb571de46572ebddd03ad894ac2f5d57a9a45cc1ef002de2a1d099ca34a15df3ac61a39aedbb0cf572710acd27d17d59c71a94acc02e14890649f20e82c65f291033f0ac28e3ae7795255688d2d3234309c7690a42335cbf041103004467d6a230f0a1d7dfd6e89d6f47bc6b3e318b0472a8d10e9f94c701ef4842e2c1121a6dea17da06d2a74aef6aa17e6d540fc6f66ac1e9afc96130877266bb642ee53c51fbb5c0731d1fe37253cac4727d34994b0f178b074a7d912309a3afbe95501b90539099b07999db58f341124893f100a5a770") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:44 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x8, 0xa040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:44 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:44 executing program 0: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="be1e7175389cd84ab6e4f577"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x1b0001c000000000, [0x8000000487]}) 00:33:44 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:44 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="8c895eb0b132687dd8eb4e935375f751583bdfa17f5aad0e499b2fbda77f4fd410201171c6374315a9c08e9306fa0016765eef2ef4ed5a9bd240ce89d2787e544fd7c19d007cef11bc6712075c97e56a2d3d49a636", 0x55, 0x2}], 0x8000, &(0x7f0000000400)={[{@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x1c}}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0xbc8}}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_user={'obj_user', 0x3d, '^wlan0#'}}, {@euid_gt={'euid>', r1}}, {@hash='hash'}, {@uid_gt={'uid>', r2}}]}) flock(r0, 0x4) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0) 00:33:44 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:45 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) [ 1196.424939] erofs: read_super, device -> /dev/loop3 [ 1196.489168] erofs: options -> user_xattr,nouser_xattr,fault_injection=0x000000000000001c,user_xattr,fault_injection=0x0000000000000bc8,nouser_xattr,noacl,func=POLICY_CHECK,obj_user=^wlan0#,euid>00000000000000000000,hash,uid>00000000000000000000, 00:33:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x150001c0, [0x8000000487]}) 00:33:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1196.591283] erofs: cannot find valid erofs superblock 00:33:45 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 1196.751759] erofs: read_super, device -> /dev/loop3 [ 1196.784151] erofs: options -> user_xattr,nouser_xattr,fault_injection=0x000000000000001c,user_xattr,fault_injection=0x0000000000000bc8,nouser_xattr,noacl,func=POLICY_CHECK,obj_user=^wlan0#,euid>00000000000000000000,hash,uid>00000000000000000000, [ 1196.807540] erofs: cannot find valid erofs superblock 00:33:45 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x111000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000640)={0x7, 0x15, 0x2}, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000680)={0x8, 0x100000001}) 00:33:45 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:45 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x221001c0, [0x8000000487]}) 00:33:45 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:45 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x400, 0x502) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x8, 0x6, 0x43b3327, 0x100000001, 0x8}) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x8b00, [0x8000000487]}) 00:33:45 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:46 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x34000, 0x72) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x36, @multicast2, 0x4e23, 0x2, 'none\x00', 0x8, 0x3, 0x2a}, {@empty, 0x4e22, 0x2000, 0x8, 0x92, 0x10000}}, 0x44) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000000)) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000340)=@random={'security.', 'none\x00'}, &(0x7f0000000380)='cgroup\x00', 0x7, 0x1) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:46 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a02000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/110) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r0, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0000084, [0x8000000487]}) 00:33:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:46 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:46 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:46 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)=0x3) r1 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x7, 0x401) connect$netlink(r1, &(0x7f0000000680)=@unspec, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000700)={'eql\x00', @remote}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) clock_gettime(0x5, &(0x7f00000006c0)) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:46 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:crond_initrc_exec_t:s0', 0x20, '/usr/sbin/ntpd'}, 0x4d) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:46 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x4800000000000000, [0x8000000487]}) 00:33:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) 00:33:46 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000d2b000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="e6e5989ab44430f3df90f02fde2143c7b55b07783b1cedebe21b0388693a21e85a7c92fa73f7521e9ffaeff43d07ceede9e0e3ec823bc606f621beb2ca920c259d98265e17f17ac3914f"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:46 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xd901, [0x8000000487]}) 00:33:47 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x800) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:47 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) 00:33:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:47 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r7) close(r6) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) 00:33:47 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x400400) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x16, ""/22}) socket$l2tp(0x18, 0x1, 0x1) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0000101, [0x8000000487]}) 00:33:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:47 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:47 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x34, [0x8000000487]}) 00:33:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:47 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:48 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vsock\x00', 0x10042, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000680)=0x3, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000940)={0xffffffff7fffffff, 0x0, 0x1, 0x10000, 0x8, [{0x2, 0x2, 0x2, 0x0, 0x0, 0x2403}, {0x8, 0x0, 0x5, 0x0, 0x0, 0x201}, {0xffffffff00000000, 0x8, 0x6, 0x0, 0x0, 0x340a}, {0x4, 0x2, 0x3b, 0x0, 0x0, 0xc00}, {0x8001, 0x1617, 0x6, 0x0, 0x0, 0x2}, {0xa9, 0x25b6, 0x8000, 0x0, 0x0, 0x801}, {0x5, 0x1, 0x5, 0x0, 0x0, 0x200c}, {0x5, 0x1, 0xa65, 0x0, 0x0, 0x8}]}) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r7, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000600), 0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r8, 0x100, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc001001f, [0x8000000487]}) 00:33:48 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:48 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:48 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:48 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:48 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x190, 0xfffffffffffffff5, 0x3, [{0x1, 0xa827, 0x15, 0x1000, '/dev/bus/usb/00#/00#\x00'}, {0x0, 0x199f, 0x15, 0x20, '/dev/bus/usb/00#/00#\x00'}, {0x6, 0x5, 0x15, 0xd272, '/dev/bus/usb/00#/00#\x00'}, {0x0, 0x814c, 0x9, 0x9, 'vboxnet0:'}, {0x5, 0x0, 0xf, 0x197d, '\\bdev\'wlan1ppp1'}, {0x0, 0xc7, 0xa, 0x4, 'eth0nodev#'}, {0x6, 0x600, 0x9, 0xfffffffffffffffe, '!vboxnet0'}, {0x6, 0x4, 0x15, 0xffffffffffffffe0, '/dev/bus/usb/00#/00#\x00'}, {0x1, 0x5, 0x4, 0x4363, 'eth1'}]}, 0x190) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:48 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:48 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0010113, [0x8000000487]}) 00:33:48 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:48 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x81}, 0x7}, 0x20, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xfb21a945f37d70de) mmap$xdp(&(0x7f0000cab000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="9e643951baa6a11acc7709b812d1ebb3919af1c38e468f2e7d0fe7212a859447b2e3a21604fdc17a1d28f0a23fb1865d7c2ba649de6aacd51e0f0ef4c3804b6b6158f85c93d193204b195c0ab0af1b601eace4c1a94453668f960008afc55aeb39cc26bfa47d3a9bf4b993a9b45c8a5ccb44f5bffc66"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ca9000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x40) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 00:33:49 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:49 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:49 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:49 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:33:49 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0010007, [0x8000000487]}) 00:33:49 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) r1 = request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8) keyctl$get_persistent(0x16, r0, r1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:33:49 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:49 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x840000c000000000, [0x8000000487]}) 00:33:49 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:49 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x238000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x85, 0x0, 0x8000, "29ac8a43d0cceafbf268cd5a0ffb220b110adab32d67a98d0bade6f47cb3d6e03f2473a86ce430b6b54255801dcff656beb16e7993ffcb3679106005ae3cb69799537c3b32722a3b1ecd57c52ad0d29ec7ede046e32415b03c26a20968199fa6269017e8c1c50d547282f1a1aa2d27ccafbef8f7c3ad311b0b7c273d6ab812fec38e1d3e96"}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) 00:33:50 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0xffffffffffffffff, &(0x7f00000006c0)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) mkdirat(r2, &(0x7f0000000640)='./file0\x00', 0x100) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000680)) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:50 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:50 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x4b564d00, [0x8000000487]}) 00:33:50 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:50 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) recvfrom$llc(r0, &(0x7f0000000080)=""/200, 0xc8, 0x40000120, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x7ff, 0x4, 0x8001, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x20) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:50 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ef8000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x9f00004000000000, [0x8000000487]}) 00:33:50 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:50 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:50 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:50 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0xdcb, 0x10000, 0x8, 0x3}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:51 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000640)={0x980004, 0x7fff, 0x0, [], &(0x7f0000000600)={0x9f090d, 0x8, [], @value64=0x5}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:51 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, 0xffffffffffffffff) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:51 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x2c1001c0, [0x8000000487]}) 00:33:51 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(0xffffffffffffffff, r1, 0xfffffffffffffffc, 0x1) 00:33:51 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) syz_emit_ethernet(0x65, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000081001600001100fc20bbd8c82950bf6a60b8f6bc14fe5ea7c616325125d0595cd996c49e875f4c84adaa12d2630d6744ca7ad9b87862580e208f604e7a74319379b42ca309fe5601a3f93a090873132a1d3696cbf6c72cb4ee44da42fea830d40d71aadd3d8aa17b6dc5af3fa6f54a11c7fa97b53a91232716d075367e2c0769d9424f60b819a3e9228bfd4e034719df8d92ffc2410f7cbc9ad49a1eb3311a93"], 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "8884151caf72aa7d5d426bcc0409e361933cb805"}, 0x15, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:51 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000d0e000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x40) 00:33:51 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:51 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:51 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0010117, [0x8000000487]}) 00:33:51 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:52 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000640)={0x18, 0x0, 0x7, {0xfb}}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:52 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:52 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="947584d3d99b2e64d1fd7249665880835895a42199885e4d96b610facefea99e6324529f9e0fe2be833fdeaf702caedcf0877e8a9a5bcf0e3166da7ff254c0761773f00387db866ba31c9fa05bb93d3db5507a48aa334043d030ca05c09bf0feb63a8e1ea64474003e56c6dbd2f880952e3c2fd201a5e1e3429e3f22feb6631a95eba5c6c3853e797644150fc108ad5f0e6faf125450fbe73a3bdec8a706f0e2fbbe5dab79120efb6b03774d24b9bf0f404fbd8937c960ecd928afa863984280d2763c4222c986ef5f33b4e04c2ed4b52d15bac7c4482642a1d200ea4cf28bc365a6afaefd1e433e2f00000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x1004000000000, [0x8000000487]}) 00:33:52 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:52 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:52 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="78a48fd3ea062dfa4d31b3c711763f6c9403c95f9f919e67106cd364c24826c370d64d4821b42190a65f79ea05675452e08c6ddf9fa53d6ff9adfdad5f8477722da22a22a7ad26d9fb00fd0c4d5a35cbff491adcc93efbb68bfd845473764d7d75ddd79a0933dbe407751ffba4b29c91a9c05b5c4cde43c60fbb72ef0fb8643df8f085e497f1b2ed3d81c2e10ff8550ee87be20f98520867016379c8081dae35205341d5cd224ee301f162707b3ae72360cfa70ec00325da49cee5de60bb4a26712315e62e5e000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400180, 0x0) mincore(&(0x7f0000d06000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000180)) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:52 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:52 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:33:52 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x3400000000000000, [0x8000000487]}) 00:33:52 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="ab0bc8a7a16825c9188e102cd4da25891501f1b278406bd4caaa70f6c6dcf7f58538cf434136842691b60d061b58df69636e6c7c"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:53 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x88, 0x40) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000640), 0x4) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:53 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:53 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:53 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:33:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc0010010, [0x8000000487]}) 00:33:53 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:53 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="08b0a361d87ab0ba9790d3b6e16201a475edbe17481bb97065ba45e4c0da159cddd75de09208d514f85cc2b05ca19818f150b0b03f03a566faf10d10cd2f10ccb15317027b58b15caf29e94c460531bda6d55a64cad7fccbe10d96f315f7756bb258c7b27a95414c2b7201c5f7a1aa8ded6e35f2ccd20ca1d515c5f8c67ad9801b288f27de42cab16f92969fe4ff7ccea864aeb845e2cf"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000000)={'nr0\x00', @ifru_addrs=@can}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x801e, r0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000140)=0x1000) times(&(0x7f0000000180)) 00:33:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xb700004000000000, [0x8000000487]}) 00:33:53 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:53 executing program 5: socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:53 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x8004000000000000, [0x8000000487]}) 00:33:54 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) accept$alg(r1, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000600)={0xeb, "37b47b6d388a6710164303793b7652db4f85c1c8315c1ebc903e403510d2f2cdd1a29856d35b062bffb948476ff3d6d02ea56fd0580856b6f5f327ed917955629cc6ccf0078a3ff5ac9190e1ee08732bc3be3d8adb72e2ca36f9cfeddb45fac7b8123ecf9c5c7c24045b9e1ccbdad220ddb131d26f0c57944f18aaa6c92102bb536502d16df0d6a8b6678ac38dd9708b65b7bbe0bf8e4b7da80a26446586dfe262c9e3f5d294e49f69c7c61bb6d6cf01472e61f1fd8ed395360e3f09142cb7ec49b22e05b7e339daa3a4d35e9dcd0db471f07c8ef12e9e80434de4ccbfdf9803f26cbfd9b2db878910521a"}) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x80040000, [0x8000000487]}) 00:33:54 executing program 5: socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:54 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x202800, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0x6, 0x0, 0x9, 0x6, 0x10, 0x100000001}) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:54 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:54 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x10d001}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:33:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x10100c000000000, [0x8000000487]}) 00:33:54 executing program 5: socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:54 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x8b000000, [0x8000000487]}) 00:33:54 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x800) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000140)={0x8, 0x9}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 00:33:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:54 executing program 5: r0 = creat(0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:54 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000840)={@mcast1, r4}, 0x14) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) nanosleep(&(0x7f0000000880), &(0x7f00000008c0)) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$BLKPG(r2, 0x1269, &(0x7f0000000800)={0x5398a7d4, 0x1, 0xfa, &(0x7f00000009c0)="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"}) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000980)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe83) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x75010000, [0x8000000487]}) 00:33:55 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000a2e000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:55 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:55 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x8004, [0x8000000487]}) 00:33:55 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:55 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/autofs\x00', 0x8000, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000007c0)=0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000640)={{0x1, @addr=0x74}, "f382d372b2668f9638a048f300cbab32d67d08ed9961c800026949ec49d11a8e", 0x2}) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) fanotify_init(0x8, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000840)=[@in={0x2, 0x4e23, @multicast2}], 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) eventfd(0x2) 00:33:55 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x2c00000000000000, [0x8000000487]}) 00:33:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:55 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:55 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:55 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x8b00000000000000, [0x8000000487]}) 00:33:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:56 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000001c0)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x6, &(0x7f0000000240)) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x84400, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xff0b0000, [0x8000000487]}) 00:33:56 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:56 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:56 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:56 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:56 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x3a, [0x8000000487]}) 00:33:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:57 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x1, 0x105000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f6dc7f1f849d8c790ae5f63f00dc0be9bade0000", @ANYRES16=r3, @ANYBLOB="040029bd7000fedbdf250e000000400003001400060000000000000000000000ffffffffffff0800010000000000080007004e240000080001000100000008000400030000000800010002000000780002000800060002000000140001000000000000000000000000000000000114000100ffffffff000000000000000000000000140001000000000000000000000000000000000008000b000200000008000400f7ffffff08000b000000000008000800020000000800050002000000080002004e2000001800020014000100fe8000000000000000000000000000aa0800050003000000"], 0xec}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r5 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r7, 0xffffffffffffffb7, &(0x7f0000000080)) write$binfmt_script(r5, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r4, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:57 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:57 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x10a, [0x8000000487]}) 00:33:57 executing program 3: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1) 00:33:57 executing program 3: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:57 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:57 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x4d564b00000000, [0x8000000487]}) 00:33:57 executing program 3: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 00:33:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:57 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:58 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:58 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xc200, [0x8000000487]}) 00:33:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 00:33:58 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:58 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000600)={0x1, 0xfffffffffffffff8, 0x2, 'queue1\x00', 0x5}) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:33:58 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 00:33:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xda0, [0x8000000487]}) 00:33:58 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:58 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:58 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x100000000000000, [0x8000000487]}) 00:33:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) 00:33:59 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:59 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:59 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xde01000000000000, [0x8000000487]}) 00:33:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) 00:33:59 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e28, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x400000002) 00:33:59 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) 00:33:59 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:33:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xce, [0x8000000487]}) 00:33:59 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:33:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:33:59 executing program 1: 00:34:00 executing program 1: 00:34:00 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:00 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:00 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:00 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:00 executing program 1: 00:34:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x820000c0, [0x8000000487]}) 00:34:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:00 executing program 1: 00:34:00 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:00 executing program 3: socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:00 executing program 1: 00:34:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x9901, [0x8000000487]}) 00:34:00 executing program 3: socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:01 executing program 1: 00:34:01 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:01 executing program 3: socket$inet6(0xa, 0x803, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:01 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) syz_open_dev$ndb(&(0x7f00000008c0)='/dev/nbd#\x00', 0x0, 0x440) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0xfffffffffffffffc, &(0x7f0000000900)={0x0}) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000840)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRESHEX=0x0]], 0xffffffffffffffe0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000880)=0x5, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000640)=0x2, 0x4) sendmsg$rds(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/35, 0x23}, {&(0x7f0000000a40)=""/113, 0x71}, {&(0x7f0000000ac0)=""/148, 0x94}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/131, 0x83}], 0x6, &(0x7f00000014c0)=[@fadd={0x58, 0x114, 0x6, {{0x100000000, 0x25b}, &(0x7f0000000d80)=0x200, &(0x7f0000000dc0)=0x100000001, 0x1, 0x45, 0x8000, 0x1, 0x2, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x8d, 0x400}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000001, 0x10000}}, @fadd={0x58, 0x114, 0x6, {{0xec, 0x7}, &(0x7f0000000e00)=0x5, &(0x7f0000000e40)=0x9, 0xfffffffffffffffa, 0x2f5, 0x400, 0x4, 0x10, 0x3ff}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x7}, &(0x7f0000000e80)=0xed5, &(0x7f0000000ec0)=0x4, 0x9, 0x5, 0x81, 0x101, 0x4, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @rdma_args={0x48, 0x114, 0x1, {{0x5e, 0xa8d6}, {&(0x7f0000000f00)=""/98, 0x62}, &(0x7f0000001200)=[{&(0x7f0000000f80)=""/53, 0x35}, {&(0x7f0000000fc0)=""/245, 0xf5}, {&(0x7f00000010c0)=""/155, 0x9b}, {&(0x7f0000001180)=""/120, 0x78}, {&(0x7f00000013c0)=""/206, 0xce}], 0x5, 0x4, 0x7ff}}], 0x198, 0x14}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000680)={0x5, 0x70, 0xca9, 0x6, 0x5, 0x1, 0x0, 0x3, 0x0, 0x4, 0x1, 0x4, 0x20, 0x20, 0x1, 0x5, 0x4, 0x8, 0x6, 0x0, 0x155, 0x9, 0x2, 0x6, 0x1, 0x6, 0x211, 0xfe, 0x7, 0x6, 0x1c5, 0x8, 0x1, 0x7, 0xffffffff, 0x1, 0xb9, 0x9, 0x0, 0x0, 0x2, @perf_config_ext={0x4612, 0x2}, 0x400, 0x7, 0x20, 0xf, 0x80000001, 0x7, 0x3}, r6, 0x8, 0xffffffffffffffff, 0x2) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) r7 = msgget(0x0, 0x2) msgrcv(r7, &(0x7f0000000940)={0x0, ""/146}, 0x9a, 0x3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000600)='vegas\x00', 0x6) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x4000009f, [0x8000000487]}) 00:34:01 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 00:34:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x3b00000000000000, [0x8000000487]}) 00:34:01 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2000000005, 0x3a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:34:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0xb000004000000000, [0x8000000487]}) 00:34:01 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:02 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000a80)="0a5c2d023c126285718070") r1 = socket$kcm(0x10, 0x1000000100000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x40000000000016f, 0xc00e, 0x0) 00:34:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x410101c0, [0x8000000487]}) 00:34:02 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:02 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000600)=@random={'btrfs.', '+:trustedtrustedppp0\x00'}, &(0x7f0000000640)='%\x00', 0x2, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fcntl$setpipe(r4, 0x407, 0xffffffff) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) eventfd(0x2) 00:34:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:02 executing program 1: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000180), 0x24, 0x0) getxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x171) 00:34:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:02 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x810000c0, [0x8000000487]}) 00:34:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x5, 0x80000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:02 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:03 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x20100, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000640)=""/20) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r3, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x2c000000, [0x8000000487]}) 00:34:03 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:03 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x5, 0x80000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80c0000102]}) 00:34:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:04 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000640), &(0x7f0000000680)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80c0000103]}) 00:34:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, 0xffffffffffffffff) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:04 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:04 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x5, 0x80000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:34:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048d]}) 00:34:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:05 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000176]}) 00:34:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:05 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r4, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:05 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:34:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000483]}) 00:34:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:05 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:34:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000491]}) 00:34:06 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:34:06 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:06 executing program 1: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 1: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000048]}) 00:34:06 executing program 1: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:06 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:06 executing program 1: socket$inet6(0xa, 0x803, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80c0000100]}) 00:34:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 1: socket$inet6(0xa, 0x803, 0x7) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:07 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x38) write$FUSE_BMAP(r2, &(0x7f0000000600)={0x18, 0x0, 0x1, {0x5}}, 0x18) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:07 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000175]}) 00:34:07 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) syz_emit_ethernet(0x65, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000081001600001100fc20bbd8c82950bf6a60b8f6bc14fe5ea7c616325125d0595cd996c49e875f4c84adaa12d2630d6744ca7ad9b87862580e208f604e7a74319379b42ca309fe5601a3f93a090873132a1d3696cbf6c72cb4ee44da42fea830d40d71aadd3d8aa17b6dc5af3fa6f54a11c7fa97b53a91232716d075367e2c0769d9424f60b819a3e9228bfd4e034719df8d92ffc2410f7cbc9ad49a1eb3311a93"], 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "8884151caf72aa7d5d426bcc0409e361933cb805"}, 0x15, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:07 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:07 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) syz_emit_ethernet(0x65, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000081001600001100fc20bbd8c82950bf6a60b8f6bc14fe5ea7c616325125d0595cd996c49e875f4c84adaa12d2630d6744ca7ad9b87862580e208f604e7a74319379b42ca309fe5601a3f93a090873132a1d3696cbf6c72cb4ee44da42fea830d40d71aadd3d8aa17b6dc5af3fa6f54a11c7fa97b53a91232716d075367e2c0769d9424f60b819a3e9228bfd4e034719df8d92ffc2410f7cbc9ad49a1eb3311a93"], 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "8884151caf72aa7d5d426bcc0409e361933cb805"}, 0x15, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000484]}) 00:34:08 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:08 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:08 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048f]}) 00:34:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:08 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(0xffffffffffffffff, r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000d90]}) 00:34:09 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:09 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:09 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000600)={0x8000, 0x2}) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)) 00:34:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 00:34:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048b]}) 00:34:09 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r7) close(r6) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cadecc660000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950fbdae03c70877394feeab5cae8422f866838fe99cd6858a17b4ee60d4c0f6569732317839750227ac0232401eb84c669a5bcb9d298538c09a34a2367c7e4e93f73eb718dd941dde0741dcf2ae650dc3c5da78decfdbd1ec082460d7ea45e4f080357db602c4e078cea63dec91a15307b2d0350f4c3db51d0c4bf0ec23c866767be3391d1"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) 00:34:09 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)) 00:34:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 00:34:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0x0, &(0x7f0000000080)) 00:34:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80000004d0]}) 00:34:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 00:34:09 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r7) close(r6) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) 00:34:10 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/access\x00', 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, 0x0) 00:34:10 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000003a]}) 00:34:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 00:34:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r7) close(r6) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) 00:34:10 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000485]}) 00:34:10 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:10 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r7) close(r6) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r8, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:34:10 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:11 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:11 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) 00:34:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:11 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000d2b000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="e6e5989ab44430f3df90f02fde2143c7b55b07783b1cedebe21b0388693a21e85a7c92fa73f7521e9ffaeff43d07ceede9e0e3ec823bc606f621beb2ca920c259d98265e17f17ac3914f"], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000488]}) 00:34:11 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048a]}) 00:34:11 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:11 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') 00:34:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:11 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000600)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000680)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0xc0000000000, @dev={0xfe, 0x80, [], 0x13}, 0x49664070}], 0x2c) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000640)=0xfffffffffffffffc) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000174]}) 00:34:11 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:11 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) 00:34:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r2, r1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 00:34:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000486]}) 00:34:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x9, 0x0, 0x4, 0x80000000, {0x77359400}, {0x4, 0x2, 0x5, 0x6, 0x10000, 0x401, "8923d79a"}, 0x2, 0x7, @offset=0xe441, 0x4}) socketpair(0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "4b43f281ffd799c38b4041995e08c9f6"}, 0x11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8040000ff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40), 0x2c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x10, 0x1, 'client1\x00', 0x3, "bf38f77ff061fc59", "9857b072b00198f3c3512cd1f8f4ea86a7b7ce87000aa405c8fe0b33fc2f003d", 0x2, 0xffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000180)) msgrcv(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d29c845eac25e257aec5b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x3, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 00:34:12 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r3, r2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) tee(r2, r1, 0xfffffffffffffffc, 0x1) 00:34:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) msgrcv(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) 00:34:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x9, 0x0, 0x4, 0x80000000, {0x77359400}, {0x4, 0x2, 0x5, 0x6, 0x10000, 0x401, "8923d79a"}, 0x2, 0x7, @offset=0xe441, 0x4}) socketpair(0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "4b43f281ffd799c38b4041995e08c9f6"}, 0x11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8040000ff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40), 0x2c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x10, 0x1, 'client1\x00', 0x3, "bf38f77ff061fc59", "9857b072b00198f3c3512cd1f8f4ea86a7b7ce87000aa405c8fe0b33fc2f003d", 0x2, 0xffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000180)) msgrcv(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d29c845eac25e257aec5b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x3, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 00:34:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048e]}) 00:34:12 executing program 2: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000007c0)=0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r4, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r1, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xfffffffffffffeb6}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 00:34:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) 00:34:12 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000003900)=ANY=[], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x6, 0x2a11b48d, r3}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) r5 = semget$private(0x0, 0x0, 0x40) semctl$IPC_INFO(r5, 0x4, 0x3, &(0x7f0000003840)=""/137) r6 = getgid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f0000000840)=0xe8) getresgid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000a40)=0xe8) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000dc0)=0xe8) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000003680)) stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003500)={0x0, 0x0, 0x0}, &(0x7f0000003540)=0xc) sendmmsg$unix(r2, &(0x7f00000036c0)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)='X', 0x1}, {&(0x7f0000000140)="b4c10c2589c26c8d98ac0ff91bc0e6e5ac78f5052e8e62e128430f1490b254409028347721ea89c8960a97458da41f12a44ea15854a33d3f176f54b9cb638fe826a60dbdd3b91bfee6cd34ba7d84", 0x4e}], 0x2, &(0x7f0000000340)=[@cred={0x20, 0x1, 0x2, r3, r4, r6}], 0x20, 0x8000}, {&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)="b26bed3374e2e3a334f3288cc3f8d96dfa69fe436d0a0c2997320a49624ca956d8012805d2bf3cd649fdbf56110af6", 0x2f}], 0x1, 0x0, 0x0, 0x4008000}, {&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000500)="4d97ad9009eb380077844757b42b857caf6be14de6f3cf7192f324db2304b6c357bb5ac5f1ad19a97b7f34427cf9cb2f8ea78e1fc43391db7d6f1ee522381f4fefee48ba8e8637ea8b7e98b214c63b7af83dfc473ed927a53103df4c6913fa34a2409721fdc0928f2aefc85ef1995180006d8fa43f27b17ef414c69d0e22927b990b64", 0x83}, {&(0x7f00000005c0)="10b2e7164a8f218158e5b0cc2aa83951063b2171f2285aad0bcd8ef09506ffa75d0fe7511484ca729a9006fe893b3255aea170f72a35de3678458838a0a2b192bef8c91cb2c5abd7b3a9a43757917aa56592322538308d0367da43d71efeb08852573c43632e538226150087580b8fa35c4232295719ca81eb924e6ba7fb9e75cc0aaca1e54d97812df6d7347346df86d63f8369852d8495cad118caee1683cd82bd9445f701230577c1331e1076255efecb4bfdbb00749143b2896233401288ce64061604a81e00f7fd51839e", 0xcd}, {&(0x7f00000006c0)="969409bb7e0242476a996ff1eee71e11adb929b83d4b3d01a5b7929a436fa6472d62864bea0de367199d267cabed0eec42607580898e9e677aca", 0x3a}], 0x3, &(0x7f0000000ec0)=[@cred={0x20, 0x1, 0x2, r3, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r3, r9, r10}, @cred={0x20, 0x1, 0x2, r3, r11, r12}, @rights={0x20, 0x1, 0x1, [r1, r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r3, r13, r14}], 0xf8, 0x41}, {&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x6}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001040)="40ad4d93604ff4c5fc72ed5f351cc0f1a9e2bb8d6606af96a845b49b70209fc8bfd09365acc6bdb66ab911075af8b54f1bfbd832d820c4b73a7cc7a484fad50e116cfc961e153820029fa541168a10b0bbd6a0dc4e451bd91727314e8b524505ed00a72575a0812532139208b97b703833f0423e0a67d80e0cd28c87610f82731065", 0x82}, {&(0x7f0000001100)="538b3932749017d5b01ee5ebd45bc01b271b98bb9e42b12caf", 0x19}, {&(0x7f0000001140)="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", 0xfc}, {&(0x7f0000001240)="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", 0x1000}], 0x4, &(0x7f0000002280)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x10}], 0x28, 0x8004}, {&(0x7f00000022c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000002340)="435b01568bf9747efda3bc95244db5cedfabd1a6aff13484dae3c9391b922e5273b516f252e2a909bb6e1084a43c2d65d1e869a2f831c612dbc203973870454224d4249309f02999a9d4e21e37efc1d34700891406b6b5858e4ef07a073f8922b43eeeea7daf53b19617d2403690933e0e5b2b1d12b3e7e04bbfb0cda424e7be78cbc947fb1b5f059273d46fa5ce22aaa361cb326efe4b57e5332f270e165b3ff8c79bdf430161717f0e72eebc46e1", 0xaf}, {&(0x7f0000002400)="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", 0x1000}], 0x2, &(0x7f0000003580)=[@cred={0x20, 0x1, 0x2, r3, r15, r16}, @rights={0x10}, @rights={0x38, 0x1, 0x1, [r2, r1, r2, r1, r2, r0, r1, r2, r2, r2]}], 0x68, 0x48044}, {&(0x7f0000003600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003680), 0x0, 0x0, 0x0, 0x4000}], 0x6, 0x4000) 00:34:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80c0000101]}) 00:34:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, 0x4, {0x7, 0x1c, 0x2, 0x0, 0xffffffffffffff01, 0x4, 0xfffffffffffffc01, 0x1}}, 0x50) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x34, 0x0, @tid=r4}, &(0x7f0000000180)=0x0) timer_gettime(r5, &(0x7f00000001c0)) 00:34:12 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x11) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:13 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x11) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) socket$l2tp(0x18, 0x1, 0x1) 00:34:13 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="cafd34423c50438e25b7a8318290ef792d28ac326073451c9dd2872e87421bc2abbe527b26fdfbeb5d1c1b8274563f013b8377b3762e959755ac335808a166b284412133f186b5d767daf708aa23d511d8eeb6b4764a7d77519b0043c55fbc67b085186cc309a1eb6df1670e738873f44e5e004b973c2e08cb634c0578d479968eafd8eb3899fcd69c411c492cd5402bc14b845a208f13947ffcec5ff5e4f80bff2382d87da610965d"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000480)=[0x7, 0x8, 0x5, 0x10000, 0x7ff, 0x7fff, 0x8, 0x5, 0x100000000], 0x9, 0x9, 0x80, 0x9, 0xfff, 0x3, {0x0, 0x5, 0xfffffffffffffffe, 0x8, 0x40, 0x9, 0x7, 0x12e, 0x81, 0x7710, 0x6c, 0x9, 0x4, 0xfff, "5b274e9619728181a6de114a6c5643e8e266156ecd44f7ab7820a663e28af689"}}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xfff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000001c0)="e521e79f021e848b840156fdc4011a2cbf11db7fd1c8745718de96fa4c2174da15aabdcab553f1676fa35d3cf97b") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 00:34:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000480]}) 00:34:13 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x11) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:13 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x0, 0x11) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000080)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:13 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000600)={0x0, 0xfaab588, 0x7, [0x9, 0x5, 0x43, 0x40, 0x3c22, 0x1, 0xffffffffffffffe4]}, &(0x7f0000000640)=0x16) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000680)={r5, 0x56a7, 0x7fffffff}, &(0x7f00000006c0)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ae35780094b3202996e58455fe283f06b624264bd7d81211b590c1114c1a7b06b0dced1b2499d2d454e60071e9cab344c0b2482b7232a889dde743b39eb5005c74475439c178adc7a36b3d29d62763d758c9b9b7699a76cc99b7187392345026191b5d56a0db9413da709bd857264fb473acbcebf87308e889ec9475e101d64d7ce1017e52f4de90e911f8c3aef112ee098d32b17ed037055a00f0ab32a40160aff2c697190fb5a469e2d6a3c0f3dcf79112eb427028e0cb3978e286cd7d343fe899e7aef82c6e0a0dd7dab1558bdc81d4f0b212875bcc1ba32af8ec828e3791dc1e8ce680c6ae36733f6a9b52488283", 0xf0}], 0x1) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000da0]}) 00:34:13 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000100)={@remote, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000240)={@loopback, r2}, 0x14) ioctl$int_in(r1, 0x5473, &(0x7f00000000c0)=0xba2) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) 00:34:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x205, 0xa0800) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:34:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ftruncate(r0, 0x212a721e) 00:34:13 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x5, 0x7, 0x401, 0x10001, 0x6, 0x6}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) open_by_handle_at(r1, &(0x7f0000000480)={0xf7, 0xffffffffffffa58d, "5651a216496388023e49b1750bf1dcba59fd90a9b15d7552655d6e02666e2909331b39ed278dd0924e6376ba41ae44ac0275a465db786ef9d154cf04f19d8e4c6cb1c281bf6075ec033ce52da62cf7bda62ba503bfd7eb72838be8cb1c6a2e389f1ada81781c3d677a409f6c0f012cf9a9969b96605de06f1cd03ef04c95b99b9285bbf6a0523b17edda0fc71983cd2fb746120cd553471cb82022cc53a1e0ca5e5396eba5c63c2ea1b364750bb977ca18596850d277fe869c1aa2f2f959af30c0df5c91ecefdd6288cc3fcf292675c46346fc885cfac59a5f367221d7564ca0b92d1f24559941f4d04690e496d31e"}, 0x2000) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000380)=""/232, &(0x7f0000000100)=0xe8) setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f00000001c0)="1d7257d9d08ac99f0faeac3d7f56e0076554e9acbb7c702d214e08f05ed870f1e6dc10e3a85feac71444ab3273ab86183800", 0x32) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:13 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x5, 0x7, 0x401, 0x10001, 0x6, 0x6}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) open_by_handle_at(r1, &(0x7f0000000480)={0xf7, 0xffffffffffffa58d, "5651a216496388023e49b1750bf1dcba59fd90a9b15d7552655d6e02666e2909331b39ed278dd0924e6376ba41ae44ac0275a465db786ef9d154cf04f19d8e4c6cb1c281bf6075ec033ce52da62cf7bda62ba503bfd7eb72838be8cb1c6a2e389f1ada81781c3d677a409f6c0f012cf9a9969b96605de06f1cd03ef04c95b99b9285bbf6a0523b17edda0fc71983cd2fb746120cd553471cb82022cc53a1e0ca5e5396eba5c63c2ea1b364750bb977ca18596850d277fe869c1aa2f2f959af30c0df5c91ecefdd6288cc3fcf292675c46346fc885cfac59a5f367221d7564ca0b92d1f24559941f4d04690e496d31e"}, 0x2000) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000380)=""/232, &(0x7f0000000100)=0xe8) setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f00000001c0)="1d7257d9d08ac99f0faeac3d7f56e0076554e9acbb7c702d214e08f05ed870f1e6dc10e3a85feac71444ab3273ab86183800", 0x32) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000481]}) 00:34:14 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) 00:34:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f000000b000/0x3000)=nil) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:14 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000600)=[0x5, 0x2]) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000006c0)=0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400204) timerfd_settime(r2, 0x1, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:14 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x6, 0x20, 0xe3}}, 0x30) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000080)='ppp1]md5sum\\procsecurityppp0md5sum\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000400)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@afid={'afid', 0x3d, 0x4}}, {@debug={'debug', 0x3d, 0x5}}], [{@uid_lt={'uid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 00:34:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x10000000000000) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000001c0)={0xaef7, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x400, 0x0, 0x10000, 0xa92}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x4, r4}) 00:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000489]}) 00:34:14 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001800)={r4, @in6={{0xa, 0x4e23, 0x55a6, @mcast1, 0x9}}}, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="00020300"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2d29276186d925fc165912b386b9cec11703f67c1b70e826a7fe0c9f3e4cbed00a7f83835622069fc347180a144be4e4bf350879e0edec", 0x37, 0x7}, {&(0x7f0000000240)="a5ed8a6082ab5235860470e4eaafa332c6d3e1f87ce38e19c37f55c3bd15f3157e5c6d23a4dd40b202774e3cbb3eb9bbf27e027879a53724e27d738d98e8b0386206ba5aff18110c6477323866cf229b1cc132b651d17c42bb54b7fc142c77bddacae1276084beb24909de79b35d9d3d89a1", 0x72, 0x1f}, {&(0x7f0000000400)="7403caf14b56542ea86a29199c38057ee15c119766918943ceacf30ba3abc57dfcdd3b00946c4703678b99eddc2dc4015876b605ee59c18c2d2a4f41f29febd2f3cd56489478e0621f47ca0072c6a59bde1c7cba9468f391e1ec2c114f5326ec68772282e23a7e06bea8b4b63507d78409590890764a0c99cc6c5869fd201be3a25f32aa3343bceb58e637", 0x8b, 0x1ff}, {&(0x7f00000004c0)="27d7f39e5a066fac44809b12bcc3e5ae2d4e05ca149bd616e076eb5bcf9c0d79dcad1173192df44646cae21ce991557a45518e71b54a515cfa74fc195eb9432fad4159bbac94a06d15a5466863b11ba43d48ab4445d9d255996e1ac5fd01635159b53ed89ec35a7e7de1719504a697f8cddfcaddc553f4e68a2f138261b0719a5af182ae2fa00c0dcd4f02c13bd028ee54a1853cb48df04516b13f59e0fb157573466d42e06db5d1293fab2059accc12a39f667e621a07e326b865d94de6710049b0cf9cd91e9f1a60bc32fbd6d614fb053c6196754cbcd9d1b838e63b7ef7b966e42ee4a051eb9c4cd59286102fd3991ec3706347", 0xf5, 0x8c76}], 0x1, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x0, 0x3, 0x5, 0x1, 0x4}, &(0x7f00000006c0)=0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000700)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000740)="2968ec1918c3de8212f578cfb523627d7c030d81f430ae50426053ea4be142576a8b18c807a3a11a4a61a9fc61acdcae48b2187244813b270af3c30b15d43c8e850a32006b693c6d0c72d3503d2795a2642b671a321d25d4b64a099b44eb9aa2ffc15777de43dadc18d7bc569ede780703373b52653a1458e76d7b8d8f802f4268576085973535c4767e8b26ade896703a3fc7c911d6ebfdc735c2f3e04f9d8e972bfb62a9a7bc98a526fde09fd6a668cc2ede0c4c61eec8dc634c886ef1e609", 0xc0, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) syz_mount_image$gfs2(&(0x7f0000000800)='gfs2\x00', &(0x7f0000000840)='./file0\x00', 0x1ff, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000880)="67c93089679fd9e41b1569aab168e364a907d1048bb4998ec83926c0ae042b56902cd3ee37c1829b70db3e3f973f48620474937a8f8cd1", 0x37, 0x4}, {&(0x7f00000008c0)="4ad863111a40a6bda5a479bd978ca8c7858dc420025a5e790eeb551d58704eb6c7beb8ace5ec43af310cb65a1a1560daa3a11b31663dd05dcc888e16c558fde3a9498cc822cc6caf18e86521b1ed97e64c868b60a48a4eb231aed84d0e191411048b552776e581d6c11d13cc34bc33ae6e11c4f11630daecf1d294efc803250b690775323097c9d9d862595fb1b8957b52b3c882f4a209a670aeb03cafc407e68f9a3f4837c5dcd86888e9046632c6cc9f94d6df697d6401581108e096759b1194c1", 0xc2, 0xb94}], 0x4808, &(0x7f0000000a80)={[{@data_writeback='data=writeback'}, {@ignore_local_fs='ignore_local_fs'}, {@errors_withdraw='errors=withdraw'}, {@data_writeback='data=writeback'}, {@data_writeback='data=writeback'}, {@upgrade='upgrade'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r8}}, {@smackfsroot={'smackfsroot', 0x3d, 'user\x00'}}, {@subj_role={'subj_role', 0x3d, '!:cgroup\x13/ppp0ppp1'}}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'eth1cgroup]'}}, {@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@subj_user={'subj_user', 0x3d, 'loeth1lo.vboxnet1GPL\xf0\vposix_acl_access^'}}]}) keyctl$get_keyring_id(0x0, r7, 0x5) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) [ 1226.201975] Unknown ioctl -1071619020 [ 1226.224269] Unknown ioctl 1074816057 [ 1226.231059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.240649] bridge0: port 1(bridge_slave_0) entered disabled state 00:34:14 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001800)={r4, @in6={{0xa, 0x4e23, 0x55a6, @mcast1, 0x9}}}, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="00020300"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2d29276186d925fc165912b386b9cec11703f67c1b70e826a7fe0c9f3e4cbed00a7f83835622069fc347180a144be4e4bf350879e0edec", 0x37, 0x7}, {&(0x7f0000000240)="a5ed8a6082ab5235860470e4eaafa332c6d3e1f87ce38e19c37f55c3bd15f3157e5c6d23a4dd40b202774e3cbb3eb9bbf27e027879a53724e27d738d98e8b0386206ba5aff18110c6477323866cf229b1cc132b651d17c42bb54b7fc142c77bddacae1276084beb24909de79b35d9d3d89a1", 0x72, 0x1f}, {&(0x7f0000000400)="7403caf14b56542ea86a29199c38057ee15c119766918943ceacf30ba3abc57dfcdd3b00946c4703678b99eddc2dc4015876b605ee59c18c2d2a4f41f29febd2f3cd56489478e0621f47ca0072c6a59bde1c7cba9468f391e1ec2c114f5326ec68772282e23a7e06bea8b4b63507d78409590890764a0c99cc6c5869fd201be3a25f32aa3343bceb58e637", 0x8b, 0x1ff}, {&(0x7f00000004c0)="27d7f39e5a066fac44809b12bcc3e5ae2d4e05ca149bd616e076eb5bcf9c0d79dcad1173192df44646cae21ce991557a45518e71b54a515cfa74fc195eb9432fad4159bbac94a06d15a5466863b11ba43d48ab4445d9d255996e1ac5fd01635159b53ed89ec35a7e7de1719504a697f8cddfcaddc553f4e68a2f138261b0719a5af182ae2fa00c0dcd4f02c13bd028ee54a1853cb48df04516b13f59e0fb157573466d42e06db5d1293fab2059accc12a39f667e621a07e326b865d94de6710049b0cf9cd91e9f1a60bc32fbd6d614fb053c6196754cbcd9d1b838e63b7ef7b966e42ee4a051eb9c4cd59286102fd3991ec3706347", 0xf5, 0x8c76}], 0x1, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x0, 0x3, 0x5, 0x1, 0x4}, &(0x7f00000006c0)=0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000700)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000740)="2968ec1918c3de8212f578cfb523627d7c030d81f430ae50426053ea4be142576a8b18c807a3a11a4a61a9fc61acdcae48b2187244813b270af3c30b15d43c8e850a32006b693c6d0c72d3503d2795a2642b671a321d25d4b64a099b44eb9aa2ffc15777de43dadc18d7bc569ede780703373b52653a1458e76d7b8d8f802f4268576085973535c4767e8b26ade896703a3fc7c911d6ebfdc735c2f3e04f9d8e972bfb62a9a7bc98a526fde09fd6a668cc2ede0c4c61eec8dc634c886ef1e609", 0xc0, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) syz_mount_image$gfs2(&(0x7f0000000800)='gfs2\x00', &(0x7f0000000840)='./file0\x00', 0x1ff, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000880)="67c93089679fd9e41b1569aab168e364a907d1048bb4998ec83926c0ae042b56902cd3ee37c1829b70db3e3f973f48620474937a8f8cd1", 0x37, 0x4}, {&(0x7f00000008c0)="4ad863111a40a6bda5a479bd978ca8c7858dc420025a5e790eeb551d58704eb6c7beb8ace5ec43af310cb65a1a1560daa3a11b31663dd05dcc888e16c558fde3a9498cc822cc6caf18e86521b1ed97e64c868b60a48a4eb231aed84d0e191411048b552776e581d6c11d13cc34bc33ae6e11c4f11630daecf1d294efc803250b690775323097c9d9d862595fb1b8957b52b3c882f4a209a670aeb03cafc407e68f9a3f4837c5dcd86888e9046632c6cc9f94d6df697d6401581108e096759b1194c1", 0xc2, 0xb94}], 0x4808, &(0x7f0000000a80)={[{@data_writeback='data=writeback'}, {@ignore_local_fs='ignore_local_fs'}, {@errors_withdraw='errors=withdraw'}, {@data_writeback='data=writeback'}, {@data_writeback='data=writeback'}, {@upgrade='upgrade'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r8}}, {@smackfsroot={'smackfsroot', 0x3d, 'user\x00'}}, {@subj_role={'subj_role', 0x3d, '!:cgroup\x13/ppp0ppp1'}}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'eth1cgroup]'}}, {@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@subj_user={'subj_user', 0x3d, 'loeth1lo.vboxnet1GPL\xf0\vposix_acl_access^'}}]}) keyctl$get_keyring_id(0x0, r7, 0x5) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) 00:34:14 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001800)={r4, @in6={{0xa, 0x4e23, 0x55a6, @mcast1, 0x9}}}, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="00020300"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2d29276186d925fc165912b386b9cec11703f67c1b70e826a7fe0c9f3e4cbed00a7f83835622069fc347180a144be4e4bf350879e0edec", 0x37, 0x7}, {&(0x7f0000000240)="a5ed8a6082ab5235860470e4eaafa332c6d3e1f87ce38e19c37f55c3bd15f3157e5c6d23a4dd40b202774e3cbb3eb9bbf27e027879a53724e27d738d98e8b0386206ba5aff18110c6477323866cf229b1cc132b651d17c42bb54b7fc142c77bddacae1276084beb24909de79b35d9d3d89a1", 0x72, 0x1f}, {&(0x7f0000000400)="7403caf14b56542ea86a29199c38057ee15c119766918943ceacf30ba3abc57dfcdd3b00946c4703678b99eddc2dc4015876b605ee59c18c2d2a4f41f29febd2f3cd56489478e0621f47ca0072c6a59bde1c7cba9468f391e1ec2c114f5326ec68772282e23a7e06bea8b4b63507d78409590890764a0c99cc6c5869fd201be3a25f32aa3343bceb58e637", 0x8b, 0x1ff}, {&(0x7f00000004c0)="27d7f39e5a066fac44809b12bcc3e5ae2d4e05ca149bd616e076eb5bcf9c0d79dcad1173192df44646cae21ce991557a45518e71b54a515cfa74fc195eb9432fad4159bbac94a06d15a5466863b11ba43d48ab4445d9d255996e1ac5fd01635159b53ed89ec35a7e7de1719504a697f8cddfcaddc553f4e68a2f138261b0719a5af182ae2fa00c0dcd4f02c13bd028ee54a1853cb48df04516b13f59e0fb157573466d42e06db5d1293fab2059accc12a39f667e621a07e326b865d94de6710049b0cf9cd91e9f1a60bc32fbd6d614fb053c6196754cbcd9d1b838e63b7ef7b966e42ee4a051eb9c4cd59286102fd3991ec3706347", 0xf5, 0x8c76}], 0x1, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x0, 0x3, 0x5, 0x1, 0x4}, &(0x7f00000006c0)=0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000700)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000740)="2968ec1918c3de8212f578cfb523627d7c030d81f430ae50426053ea4be142576a8b18c807a3a11a4a61a9fc61acdcae48b2187244813b270af3c30b15d43c8e850a32006b693c6d0c72d3503d2795a2642b671a321d25d4b64a099b44eb9aa2ffc15777de43dadc18d7bc569ede780703373b52653a1458e76d7b8d8f802f4268576085973535c4767e8b26ade896703a3fc7c911d6ebfdc735c2f3e04f9d8e972bfb62a9a7bc98a526fde09fd6a668cc2ede0c4c61eec8dc634c886ef1e609", 0xc0, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) syz_mount_image$gfs2(&(0x7f0000000800)='gfs2\x00', &(0x7f0000000840)='./file0\x00', 0x1ff, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000880)="67c93089679fd9e41b1569aab168e364a907d1048bb4998ec83926c0ae042b56902cd3ee37c1829b70db3e3f973f48620474937a8f8cd1", 0x37, 0x4}, {&(0x7f00000008c0)="4ad863111a40a6bda5a479bd978ca8c7858dc420025a5e790eeb551d58704eb6c7beb8ace5ec43af310cb65a1a1560daa3a11b31663dd05dcc888e16c558fde3a9498cc822cc6caf18e86521b1ed97e64c868b60a48a4eb231aed84d0e191411048b552776e581d6c11d13cc34bc33ae6e11c4f11630daecf1d294efc803250b690775323097c9d9d862595fb1b8957b52b3c882f4a209a670aeb03cafc407e68f9a3f4837c5dcd86888e9046632c6cc9f94d6df697d6401581108e096759b1194c1", 0xc2, 0xb94}], 0x4808, &(0x7f0000000a80)={[{@data_writeback='data=writeback'}, {@ignore_local_fs='ignore_local_fs'}, {@errors_withdraw='errors=withdraw'}, {@data_writeback='data=writeback'}, {@data_writeback='data=writeback'}, {@upgrade='upgrade'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r8}}, {@smackfsroot={'smackfsroot', 0x3d, 'user\x00'}}, {@subj_role={'subj_role', 0x3d, '!:cgroup\x13/ppp0ppp1'}}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'eth1cgroup]'}}, {@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@subj_user={'subj_user', 0x3d, 'loeth1lo.vboxnet1GPL\xf0\vposix_acl_access^'}}]}) keyctl$get_keyring_id(0x0, r7, 0x5) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) 00:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000490]}) [ 1226.451456] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) [ 1226.629133] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000) 00:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000482]}) [ 1226.691843] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 00:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x80c0000080]}) 00:34:15 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) 00:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000010a]}) [ 1227.224577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.231139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.581257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.588170] bridge0: port 1(bridge_slave_0) entered disabled state 00:34:16 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000600)='/dev/rfkill\x00') eventfd(0x2) 00:34:16 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001800)={r4, @in6={{0xa, 0x4e23, 0x55a6, @mcast1, 0x9}}}, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="00020300"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2d29276186d925fc165912b386b9cec11703f67c1b70e826a7fe0c9f3e4cbed00a7f83835622069fc347180a144be4e4bf350879e0edec", 0x37, 0x7}, {&(0x7f0000000240)="a5ed8a6082ab5235860470e4eaafa332c6d3e1f87ce38e19c37f55c3bd15f3157e5c6d23a4dd40b202774e3cbb3eb9bbf27e027879a53724e27d738d98e8b0386206ba5aff18110c6477323866cf229b1cc132b651d17c42bb54b7fc142c77bddacae1276084beb24909de79b35d9d3d89a1", 0x72, 0x1f}, {&(0x7f0000000400)="7403caf14b56542ea86a29199c38057ee15c119766918943ceacf30ba3abc57dfcdd3b00946c4703678b99eddc2dc4015876b605ee59c18c2d2a4f41f29febd2f3cd56489478e0621f47ca0072c6a59bde1c7cba9468f391e1ec2c114f5326ec68772282e23a7e06bea8b4b63507d78409590890764a0c99cc6c5869fd201be3a25f32aa3343bceb58e637", 0x8b, 0x1ff}, {&(0x7f00000004c0)="27d7f39e5a066fac44809b12bcc3e5ae2d4e05ca149bd616e076eb5bcf9c0d79dcad1173192df44646cae21ce991557a45518e71b54a515cfa74fc195eb9432fad4159bbac94a06d15a5466863b11ba43d48ab4445d9d255996e1ac5fd01635159b53ed89ec35a7e7de1719504a697f8cddfcaddc553f4e68a2f138261b0719a5af182ae2fa00c0dcd4f02c13bd028ee54a1853cb48df04516b13f59e0fb157573466d42e06db5d1293fab2059accc12a39f667e621a07e326b865d94de6710049b0cf9cd91e9f1a60bc32fbd6d614fb053c6196754cbcd9d1b838e63b7ef7b966e42ee4a051eb9c4cd59286102fd3991ec3706347", 0xf5, 0x8c76}], 0x1, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x0, 0x3, 0x5, 0x1, 0x4}, &(0x7f00000006c0)=0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000700)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000740)="2968ec1918c3de8212f578cfb523627d7c030d81f430ae50426053ea4be142576a8b18c807a3a11a4a61a9fc61acdcae48b2187244813b270af3c30b15d43c8e850a32006b693c6d0c72d3503d2795a2642b671a321d25d4b64a099b44eb9aa2ffc15777de43dadc18d7bc569ede780703373b52653a1458e76d7b8d8f802f4268576085973535c4767e8b26ade896703a3fc7c911d6ebfdc735c2f3e04f9d8e972bfb62a9a7bc98a526fde09fd6a668cc2ede0c4c61eec8dc634c886ef1e609", 0xc0, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) syz_mount_image$gfs2(&(0x7f0000000800)='gfs2\x00', &(0x7f0000000840)='./file0\x00', 0x1ff, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000880)="67c93089679fd9e41b1569aab168e364a907d1048bb4998ec83926c0ae042b56902cd3ee37c1829b70db3e3f973f48620474937a8f8cd1", 0x37, 0x4}, {&(0x7f00000008c0)="4ad863111a40a6bda5a479bd978ca8c7858dc420025a5e790eeb551d58704eb6c7beb8ace5ec43af310cb65a1a1560daa3a11b31663dd05dcc888e16c558fde3a9498cc822cc6caf18e86521b1ed97e64c868b60a48a4eb231aed84d0e191411048b552776e581d6c11d13cc34bc33ae6e11c4f11630daecf1d294efc803250b690775323097c9d9d862595fb1b8957b52b3c882f4a209a670aeb03cafc407e68f9a3f4837c5dcd86888e9046632c6cc9f94d6df697d6401581108e096759b1194c1", 0xc2, 0xb94}], 0x4808, &(0x7f0000000a80)={[{@data_writeback='data=writeback'}, {@ignore_local_fs='ignore_local_fs'}, {@errors_withdraw='errors=withdraw'}, {@data_writeback='data=writeback'}, {@data_writeback='data=writeback'}, {@upgrade='upgrade'}], [{@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r8}}, {@smackfsroot={'smackfsroot', 0x3d, 'user\x00'}}, {@subj_role={'subj_role', 0x3d, '!:cgroup\x13/ppp0ppp1'}}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'eth1cgroup]'}}, {@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@subj_user={'subj_user', 0x3d, 'loeth1lo.vboxnet1GPL\xf0\vposix_acl_access^'}}]}) keyctl$get_keyring_id(0x0, r7, 0x5) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) 00:34:16 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x400000000000) 00:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x800000048c]}) 00:34:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000400)={0xa20004, 0x7, 0x9, [], &(0x7f00000003c0)={0x990a5f, 0x9, [], @ptr=0x1}}) r2 = getuid() getuid() getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0x0]) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x6, r1}, {0x2, 0x5, r2}], {0x4, 0x2}, [{0x8, 0x3, r3}], {0x10, 0x5}, {0x20, 0x7}}, 0x3c, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0xfffffffffffffffd, &(0x7f000000a000/0x3000)=nil, 0x2) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x6, 0x11, r4, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 00:34:16 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) 00:34:16 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x400000000000) [ 1227.789941] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) 00:34:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x3f, 0x2, 0xda00, 0x3, [{0x8, 0x3, 0x3, 0x0, 0x0, 0x300}, {0x2, 0x80000001, 0xffffffffffffff28, 0x0, 0x0, 0x4}, {0x4, 0x65c, 0xfff, 0x0, 0x0, 0x1000}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x246c, 0xa, &(0x7f00000008c0)=[{&(0x7f00000002c0)="3843c783663106fd47d8ad59198e0175282fe782d1d7c5bc692f43500213912061c9b9e53b01039112840d21911c7a6033f92767d9f7944bac1d6bac084890e37910855c547277158a02dc56ecdfcc37c265e36bfc91aaa02850bdaef4791d823a91acb902452d406a48a2931f0d9db37c7123e0b550485c277abebc86b4d49182049d85c12d87e5a65af74a18630343dc3d5e5fd3f8f3c6adfe4e862b5ec1e4f5fa23d219f09397015ed9478d0b74ac23eb9f2dda80e6cea2a3f434577c11", 0xbf, 0x7ff}, {&(0x7f0000000380)="3245a0f31137d88ab296b809aa4a26dc98f213f14bd6bb7e3e66886f2a1f3f6c8db5af46856dcde34a1ad7c2fc7e64621cb08c6200c798568907d9accfff50c08cb35e43ef6f22a4de25b6c660e1d4f97a0efa08de02079e91a6ea3e1c82a754f229eb8b0918ad6cb0923ccdd429de698e3b05349121660e58e8d40331026a2e5f39ecdb0b7e8f8abd73103bb30dc4bc13a60bc52b76ae50f8f138a2dd20e9e9fe9f17980e8e087a75d593bc55a653804df507da5fcc621f7e0dfe11042a754a3732188f28", 0xc5, 0x5}, {&(0x7f0000000480)="b9109810a8ec045247fecef02e38dbe743c970695dd0605870a43c65534a1115fb797692156ef84187693e3cb99b5d61b4eacc07127c42ed09442d8bcdafb92ec6b6ede0d9b85b40be41277553a409f059713d9782f5f173558f378de0b6da65422718feda288308a32f58a6d59882897a3749db015914130147f01bd7b932d8c1881c64e285f0444517ec1087e81d3d3d1262d430488b7277a3599072c693802241b23e9299aaaa4ca6d3172349e8", 0xaf, 0x3}, {&(0x7f0000000540), 0x0, 0x6}, {&(0x7f0000000580)="49555a73c9ba06bbf313fab6923ec8cd85f6776dba0b0b94c1ff24532cecd680df730979a3dd521842ef19ab9fae69432fba", 0x32, 0x9}, {&(0x7f0000002280)="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", 0x1000, 0x1f}, {&(0x7f00000005c0)="368fb91832ce3cfe458ba9f41fbba4dfd2633441f8edc4ab1852128b005d3800a9be7ed66ca6db6462e3381c6b71ad79cb762633e9b1b6b4defcd2388563250c1151601bbf11f0009cedb10ffda4348dd94da151d401e3368a7f4e2d29ff7ccc7b3b1f4ae45f56655a", 0x69, 0x9}, {&(0x7f0000000640)="01dda94f83cbdc74cd34b4a59860f10e46f7f6402d0c404cb29e88403d1dd76b4a3c5acaec9f89ee50ef4d80505cfb208ffc8c403d46e4a31eedbfff4940faf722c5c39831c87c906f164678da4ef88cbcd4394a6e81510be1fcdf2b44877a203e3528a770db6a4e0f53dd7ad3e9ec2e235102a373391336161ec0d86d8248137810dfd2c04a45baf6f6bc8ebcc00a31defbb4f5dd0f", 0x96, 0x5ea}, {&(0x7f0000000700)="1980f6372e461c7bb9898c97d2cdb9e1ba6334f7ec4fe8690f9d42548c4fc8e1abdfb6f4699e0b7800cecfb38b30d5fb8bdd6d8dcc5455aa22a9a3b9d687083b765db9eed895ee0802b80a9437e1a5104d87ea8f8afbbf62b711fef40db9afb25e4817c358bd23b38ad66b2351f8bf0308de86de9ed732429735b3eb8e4abcb6c4d7bac1dd558253efea1aa0f7da33c2886e801b02e2e483ad05eba114be425a0ad0e7f3a0c57e6d7965a40c52e4d97342fa92dfd863a54c67e126d7a7a70cd2b23de4a277eae3a27fd2ee220dbc046f485649ec387a1f6b1d64332993f7fc8d6470724b25090ddf51ed52207519b63b", 0xf0, 0x4}, {&(0x7f0000000800)="4bca3851bda55e2ef2f4872d5a32348ca360578a23fce75d6465049bc9afbce7abcd0ff713b2f5c5f0f6ca6c0e0a3de7567caf274276667e784e909b6de7a3e5d58e731415fdbf4b5445ae0bf602c5b97056cd959ce6c5f03fca3075ebbd15933494abad2a50dcc0777382c9e27c4ea6d8b4ca9cff5146b95971dc1e846933218597c3f3d695ff728a7a2f117090558b113e696e384fb456ce0825f27ad2ce551e41a0fa17452b680c1029c0541de5", 0xaf, 0x7}], 0x100000, &(0x7f00000009c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}], [{@dont_measure='dont_measure'}, {@appraise='appraise'}]}) prctl$PR_GET_NAME(0x10, &(0x7f0000001280)=""/4096) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/236) 00:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xa01000000000000]}) [ 1227.902258] gfs2: invalid mount option: hash 00:34:16 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4, @in=@broadcast, 0x4e22, 0x2, 0x4e21, 0x5, 0x2, 0x20, 0x80, 0x88, r1, r2}, {0xffffffff, 0x8, 0x8, 0x6, 0x3, 0x4, 0x6, 0x1}, {0xff, 0x2, 0x800, 0x7}, 0x80000000, 0x6e6bb3, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x3, 0x3, 0x1, 0x8, 0x3, 0xa5bc}}, 0xe8) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) [ 1227.925797] gfs2: can't parse mount arguments 00:34:16 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) 00:34:16 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0xfffffffffffffff7}, 0x28, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:17 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@rc={0x1f, {0x0, 0x9, 0x0, 0x5964083, 0x494, 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="dfda62a8095f054ca4b4ebfe10254f26d7bd66e645d7637ff3da6a2a3b05b2e0be0acfd5d7c99fe94b6cf10236fc91cfc44749b56ed85ac662c54e79b3c5ebb5d3072028ea3e14d238b9ba4e2ca57414a528ae24f347e2d7bc30973f8e31435689f7", 0x62}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8000000000000000ff010000b8c0e430fcf37795b6d29868d460c14cdf47cec1ef30cdbb713de463f905001d80af093f5e13a69c7df2b00371a3defabb07e59b67fec2aec1e30670e521d15b9dc567bdc961501430c07a450c823f760284a78f972897bf6f62263daee6b9a53ccdaabeb7908d93c4ed5e98e3d4ad6b76090000"], 0x80}, 0x4) 00:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x40000000]}) 00:34:17 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x6b6b6b00000) 00:34:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x1000, @mcast2, 0x8}}, 0x2, 0x401, 0x7ff, 0x9, 0x62}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x9, 0x100000001, r1}, &(0x7f0000000180)=0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x272104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@getstat={0xe0, 0x15, 0x500, 0xd84, 0x25dfdbfb, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x2000, 0x2000}, ["", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 00:34:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x1000, @mcast2, 0x8}}, 0x2, 0x401, 0x7ff, 0x9, 0x62}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x9, 0x100000001, r1}, &(0x7f0000000180)=0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:17 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e21, @broadcast}}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x4b564d01]}) 00:34:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x1000, @mcast2, 0x8}}, 0x2, 0x401, 0x7ff, 0x9, 0x62}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0x9, 0x100000001, r1}, &(0x7f0000000180)=0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:18 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) sendto(r0, &(0x7f0000000380)="733c8e3059bd4ff9aefaf569bff052dd3b13d4608089848bbe26289cf8a5f48a72577ea9c58842289ae04a20a0f22a01d2a02972068cbb06369a1743c74b2ba6a43be4f5f55fd67808cb1ff635799e36e070db59ebde46d45dd4c044813fed98ddcc4ce75389f75c6cfd8f0bd63e3a2687d6b140a9ce5c7b6cd51a9e7cf3e7d9a8099b", 0x83, 0x40, &(0x7f00000000c0)=@rc={0x1f, {0x9, 0x5, 0x4, 0x40, 0x0, 0x8001}, 0x1}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @my=0x0}, 0xffffff26) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x202000) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="0c4805eedbb9e2e90ea9991605bc188c5b0817ac0bbc1460d0cef45a4c2263012a6d9368a34af847a0d2154bfa645061dd94b8fd7f4df9dda9508fb797933d0398deda4486074b7c85fd8aecbeafd293c95447d29e7fb5e699932bcea867be796d987e", 0x63, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffff9) keyctl$search(0xa, r0, &(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x3}, r1) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x1}, 0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x7, 0xff6d4dacb992f673, @raw_data=[0xf7, 0x9, 0x7fffffff, 0x1, 0x80, 0x6, 0x1, 0x7, 0xfffffffffffeffff, 0x6, 0x4ed6, 0x2, 0x4, 0xfff, 0x1c1b, 0x2]}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0xfffffffffffffffc, 0x8, 0xd5, 0x6}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000400)) getuid() 00:34:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(0xffffffffffffffff) close(r5) 00:34:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xc0000101]}) 00:34:18 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000006c0)={r7, 0x80000, r5}) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e20, @empty}, 0xffffffffffffff9a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000c40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000d80)=0xe8) syz_mount_image$f2fs(&(0x7f0000000700)='f2fs\x00', &(0x7f0000000840)='./file0\x00', 0x6, 0x2, &(0x7f0000000880)=[{&(0x7f0000000940)="0ecdea7fa3cc1bc562c92026d813e5b4ff47cc6ededde9401773d15336b1555dccf0218b495ccd15cb7d27d3027493560940030b35bbf5652638211b59ece84929e3e3f0d60f9cc7ec805c0a7a21f4cf508bc8aa5288068e5f8b6e5e597cab071ee4618c6a1592561430656a78147ffe5bcb90f4e8b8843bd1b0452659e9d0eb4ba7301213172710f6d4be08df14528c0de9cc5d879f181856258a7343107a89e776f6263f4ae92baf2b0a169d831b9d34097a0243", 0xb5, 0x7}, {&(0x7f0000000a00)="d02e670ba8e925632136eacff67a21dac243b13efc73c3c6b98c3e065845b27c03adec78116989fca0a5c647bd0ab6a2df34e5ee8fe7235bc103a2a0fc0d75a09ab51f9bb9089cbc10bda63b56ad48e4497838cb03d9c85ccbfff6674e6f3bc4b5f50663c54c9bc343ba301bd2308e772cc417be0178a204e6c895a34863b587d344572fdce5eaac6eb36fd019e789e0c74e39f2c6e0b3d84d00605770364344aad94cde17f26b003cba62c033d8a8b1e2d20881be208b092b51f9cb47b9d62a61c5992a6f022e41ccbd5f51af5664527dc2fe22c4734eae3dc9da3ca95cae575b2c", 0xe2, 0x7ff}], 0x120008, &(0x7f0000000dc0)={[{@noacl='noacl'}, {@whint_mode_user='whint_mode=user-based'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@resgid={'resgid', 0x3d, r9}}, {@data_flush='data_flush'}, {@grpjquota={'grpjquota', 0x3d, 'user'}}], [{@fowner_lt={'fowner<', r10}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r11}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) get_mempolicy(&(0x7f0000000600), &(0x7f0000000640), 0x9, &(0x7f0000ffc000/0x3000)=nil, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000ec0)={0x19, 0x2b, 0x0, 0x11, 0x4, 0x8, 0x4, 0xc5, 0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x2) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="0c4805eedbb9e2e90ea9991605bc188c5b0817ac0bbc1460d0cef45a4c2263012a6d9368a34af847a0d2154bfa645061dd94b8fd7f4df9dda9508fb797933d0398deda4486074b7c85fd8aecbeafd293c95447d29e7fb5e699932bcea867be796d987e", 0x63, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffff9) keyctl$search(0xa, r0, &(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x3}, r1) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x1}, 0x8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x7, 0xff6d4dacb992f673, @raw_data=[0xf7, 0x9, 0x7fffffff, 0x1, 0x80, 0x6, 0x1, 0x7, 0xfffffffffffeffff, 0x6, 0x4ed6, 0x2, 0x4, 0xfff, 0x1c1b, 0x2]}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0xfffffffffffffffc, 0x8, 0xd5, 0x6}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000400)) getuid() 00:34:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(0xffffffffffffffff) close(r5) 00:34:18 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xffffffffffffffe0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r1, 0x3}, &(0x7f00000003c0)=0x8) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="c3601dce89f0ef008776d5fc0e08ca83f9ac87be3ce766942537443b3d2455593fd9c0db4426e0d471e741ee391ff914d4cf5046313d9011b7f1b6f6667609adf97ee6aaf9d06fe4cd0ca2923422362cd48e441393aabf199ea129785399f1aa97a329c6e3cc60e363b91d1ba3"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:18 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x80000000000000) 00:34:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x47f]}) 00:34:18 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) r2 = socket$pppoe(0x18, 0x1, 0x0) syncfs(r2) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000dd0000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) 00:34:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(0xffffffffffffffff) close(r5) 00:34:18 executing program 1: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x80000000000000) 00:34:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x4b564d04]}) 00:34:18 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xffffffffffffffe0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r1, 0x3}, &(0x7f00000003c0)=0x8) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="c3601dce89f0ef008776d5fc0e08ca83f9ac87be3ce766942537443b3d2455593fd9c0db4426e0d471e741ee391ff914d4cf5046313d9011b7f1b6f6667609adf97ee6aaf9d06fe4cd0ca2923422362cd48e441393aabf199ea129785399f1aa97a329c6e3cc60e363b91d1ba3"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:18 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000280)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x115) chown(&(0x7f0000000040)='./file0\x00', r2, r3) setresuid(0x0, r2, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 00:34:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xc0000084]}) 00:34:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x57e, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x20080, 0x1) 00:34:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:34:19 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) 00:34:19 executing program 2: iopl(0x7) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000600)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000006c0)={0x1d, r6}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x6) eventfd(0x2) 00:34:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000280)=""/253, 0xfd}], 0x5, &(0x7f0000000400)}, 0x22) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0)={0x42, 0x1, 0x3}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000400)={@dev, @empty, 0x0}, &(0x7f00000004c0)=0xc) getresuid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@local, @in=@loopback, 0x4e23, 0x10000000000000, 0x4e22, 0x2, 0xa, 0x80, 0xa0, 0xa7, r2, r3}, {0x1000, 0x1, 0x9, 0x3, 0xab5, 0x2d, 0x0, 0x3}, {0x8, 0xb86, 0x100, 0x1}, 0x4, 0x6e6bbd, 0x0, 0x0, 0x2, 0x3}, {{@in6, 0x4d5, 0x33}, 0xa, @in6=@local, 0x3506, 0x3, 0x3, 0x200, 0x9, 0x1, 0x101}}, 0xe8) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:19 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:19 executing program 3: r0 = socket$inet6(0xa, 0x80005, 0x3) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xb700004000000000]}) 00:34:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000380)=0x37b) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r3 = socket$inet(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000200)={0x0, &(0x7f0000000940)=""/4096}) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000), 0x4000074, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x8c', 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="3dceffcfa50a171dde5f56439302f0c986c09dca3da9e98267ab390ef9fae032bc95f8963a3b67bcf69ffb8a379ee5ef58b9c5357840e07e1ad959f44c00af5afbca3a9b7e7256c06104fd75da7dd659d58e17f43989591674976cf851fe09508e6ec524d347eaceeead85f75528ac917624f5ef5dbffbe7525598142804492af0c83e629408d407826f812af10a43dec3c4"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x0, 0x76, 0x0, 0x0, 0xffffffffffffffff}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000380)=0x37b) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r3 = socket$inet(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000200)={0x0, &(0x7f0000000940)=""/4096}) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000), 0x4000074, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x8c', 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="3dceffcfa50a171dde5f56439302f0c986c09dca3da9e98267ab390ef9fae032bc95f8963a3b67bcf69ffb8a379ee5ef58b9c5357840e07e1ad959f44c00af5afbca3a9b7e7256c06104fd75da7dd659d58e17f43989591674976cf851fe09508e6ec524d347eaceeead85f75528ac917624f5ef5dbffbe7525598142804492af0c83e629408d407826f812af10a43dec3c4"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x0, 0x76, 0x0, 0x0, 0xffffffffffffffff}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000380)=0x37b) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r3 = socket$inet(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000200)={0x0, &(0x7f0000000940)=""/4096}) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000), 0x4000074, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x8c', 0x1ff) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="3dceffcfa50a171dde5f56439302f0c986c09dca3da9e98267ab390ef9fae032bc95f8963a3b67bcf69ffb8a379ee5ef58b9c5357840e07e1ad959f44c00af5afbca3a9b7e7256c06104fd75da7dd659d58e17f43989591674976cf851fe09508e6ec524d347eaceeead85f75528ac917624f5ef5dbffbe7525598142804492af0c83e629408d407826f812af10a43dec3c4"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000280)={0x0, 0x76, 0x0, 0x0, 0xffffffffffffffff}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:19 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xe006000000000000]}) [ 1231.084818] tls_set_device_offload_rx: netdev lo with no TLS offload [ 1231.152124] tls_set_device_offload_rx: netdev lo with no TLS offload [ 1231.214688] tls_set_device_offload_rx: netdev lo with no TLS offload 00:34:20 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000600)={0x1, 0x2f, 0x1, r2}) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:34:20 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x5000, &(0x7f0000000080), 0x2, r0, 0x5}) 00:34:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x5955, 0x107, "7ed4fc73cc8417c4702bd36f47626dedf56db59126498e10eec86e006630c6c4", 0x100000001, 0x80000001, 0x0, 0xe63, 0x200}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x20000]}) 00:34:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x5955, 0x107, "7ed4fc73cc8417c4702bd36f47626dedf56db59126498e10eec86e006630c6c4", 0x100000001, 0x80000001, 0x0, 0xe63, 0x200}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:20 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000080)=0xffc1) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) close(0xffffffffffffffff) 00:34:20 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xff0b0000]}) 00:34:21 executing program 5: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x0) 00:34:21 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) close(0xffffffffffffffff) 00:34:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0xfffffffffffffd77) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x8b00]}) 00:34:21 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xffffffff) eventfd(0x2) 00:34:21 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000001c0)=""/209) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16=r0], @ANYRESHEX=r0], 0x0, 0x0, 0x10022, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x355435f74b10409e, 0x0) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, @reserved}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:21 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 00:34:21 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) close(0xffffffffffffffff) 00:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x17b]}) 00:34:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x800000) 00:34:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x90) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="72051067173db01b79e13bb3393700109962026dd17d67d2509d36782e144923b26378a892ac3234eb615cfc0bfd85f6ac27880cd127da62a4ba03e0a13d74213e130df2d9df4ddf49e5381bca602879b5da329e150a9ed3342012ed5d3c81714eae93e1cd1c7e4bcbef85e21ec0958ded97"], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 00:34:21 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x2c93, 0x2080) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xddfad8e053b5ce82}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000003c0)={r2, 0x1}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x101000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x9, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x200, 0x11, 0x6, r4}, 0x10) 00:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x11e]}) 00:34:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x3b00, [0x8000000487]}) 00:34:22 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r4, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r1, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:22 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x6b6b6b) 00:34:22 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x8000000000000000, @hyper}, 0x4c9) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept(0xffffffffffffff9c, &(0x7f0000000240)=@hci={0x1f, 0x0}, &(0x7f0000000080)=0x80) sendto(r1, &(0x7f0000000100)="2369367883d2c5e294486d629d99a832289324c1edd9c1bd065297007478b9e5ceccc634b94af74d69ae89421af91152a0ff189214ad8b0ca10c999c8cd32ce5998468f7e4715b5acbab27206787970690b4c8cddba3296bf507988c7526f6e8c671d57dfd41e59c9d03b5ce0eb43afc99b2dde61d5b056f94e192", 0x7b, 0x1, &(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x2f}, 0x80) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) 00:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x48]}) [ 1233.459105] QAT: Invalid ioctl 00:34:22 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x4000000) 00:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2000000000000000) 00:34:22 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80001, 0x420007f) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r6) close(r5) 00:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x175]}) 00:34:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xa00000000000000) 00:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x100000000000000) 00:34:22 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="af010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:22 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x20000000) 00:34:22 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6(0xa, 0x80001, 0x420007f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) close(r4) 00:34:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x130101c000000000, [0x8000000487]}) 00:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) mount(&(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000640)=""/249) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x2000000) 00:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xff020000]}) 00:34:23 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x8000000000000000, 0x11, r1, 0x0) 00:34:23 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffff7) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0xfffffffffffffffd) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x383, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000300)={0x0, 0x76}) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) 00:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x2]}) 00:34:23 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:23 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:23 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r5) close(r4) [ 1234.686200] FAULT_INJECTION: forcing a failure. [ 1234.686200] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.733623] FAULT_INJECTION: forcing a failure. [ 1234.733623] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.745804] CPU: 0 PID: 4424 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #165 [ 1234.753097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.762483] Call Trace: [ 1234.765087] dump_stack+0x1d3/0x2c6 [ 1234.768726] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1234.773934] should_fail.cold.4+0xa/0x17 [ 1234.778004] ? __lock_acquire+0x62f/0x4c20 [ 1234.782258] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1234.787368] ? dput.part.25+0x26d/0x790 [ 1234.791368] ? graph_lock+0x270/0x270 [ 1234.795188] ? find_held_lock+0x36/0x1c0 [ 1234.799262] ? find_held_lock+0x36/0x1c0 [ 1234.803336] ? kvm_arch_async_page_not_present+0x348/0x970 [ 1234.808977] ? ___might_sleep+0x1ed/0x300 [ 1234.813128] ? arch_local_save_flags+0x40/0x40 [ 1234.817717] ? drm_unbind_agp+0x20/0x20 [ 1234.821704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.827255] __should_failslab+0x124/0x180 [ 1234.831499] should_failslab+0x9/0x14 [ 1234.835303] __kmalloc+0x2e0/0x770 [ 1234.838851] ? avc_ss_reset+0x190/0x190 [ 1234.842833] ? drm_ioctl+0x4af/0xb90 [ 1234.846554] drm_ioctl+0x4af/0xb90 [ 1234.850099] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1234.854951] ? drm_version+0x3d0/0x3d0 [ 1234.858856] ? ___might_sleep+0x1ed/0x300 [ 1234.863011] ? arch_local_save_flags+0x40/0x40 [ 1234.867603] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1234.872545] ? drm_version+0x3d0/0x3d0 [ 1234.876551] do_vfs_ioctl+0x1de/0x1790 [ 1234.880448] ? ioctl_preallocate+0x300/0x300 [ 1234.884862] ? selinux_file_mprotect+0x620/0x620 [ 1234.889640] ? __sb_end_write+0xd9/0x110 [ 1234.893709] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1234.899250] ? fput+0x130/0x1a0 [ 1234.902534] ? do_syscall_64+0x9a/0x820 [ 1234.906523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.912066] ? security_file_ioctl+0x94/0xc0 [ 1234.916486] ksys_ioctl+0xa9/0xd0 [ 1234.919950] __x64_sys_ioctl+0x73/0xb0 [ 1234.923855] do_syscall_64+0x1b9/0x820 [ 1234.927748] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1234.933117] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1234.938054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1234.942902] ? trace_hardirqs_on_caller+0x310/0x310 [ 1234.947924] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1234.952948] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1234.957972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1234.962839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.968030] RIP: 0033:0x457669 [ 1234.971229] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1234.990131] RSP: 002b:00007f49ef56dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.997840] RAX: ffffffffffffffda RBX: 00007f49ef56dc90 RCX: 0000000000457669 [ 1235.005111] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1235.012377] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.019665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49ef56e6d4 [ 1235.026936] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000004 [ 1235.041740] CPU: 0 PID: 4428 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1235.049064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.058423] Call Trace: [ 1235.061021] dump_stack+0x1d3/0x2c6 [ 1235.064676] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1235.069883] should_fail.cold.4+0xa/0x17 [ 1235.073952] ? __lock_acquire+0x62f/0x4c20 [ 1235.078206] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1235.083314] ? dput.part.25+0x26d/0x790 [ 1235.087299] ? graph_lock+0x270/0x270 [ 1235.091110] ? find_held_lock+0x36/0x1c0 [ 1235.095184] ? find_held_lock+0x36/0x1c0 [ 1235.099266] ? ___might_sleep+0x1ed/0x300 [ 1235.103432] ? arch_local_save_flags+0x40/0x40 [ 1235.108021] ? drm_unbind_agp+0x20/0x20 [ 1235.112003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.117556] __should_failslab+0x124/0x180 [ 1235.121796] should_failslab+0x9/0x14 [ 1235.125596] __kmalloc+0x2e0/0x770 [ 1235.129139] ? avc_ss_reset+0x190/0x190 [ 1235.133119] ? drm_ioctl+0x4af/0xb90 [ 1235.136846] drm_ioctl+0x4af/0xb90 [ 1235.140403] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1235.145262] ? drm_version+0x3d0/0x3d0 [ 1235.149164] ? ___might_sleep+0x1ed/0x300 [ 1235.153315] ? arch_local_save_flags+0x40/0x40 [ 1235.157906] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1235.162848] ? drm_version+0x3d0/0x3d0 [ 1235.166743] do_vfs_ioctl+0x1de/0x1790 [ 1235.170641] ? ioctl_preallocate+0x300/0x300 [ 1235.175061] ? selinux_file_mprotect+0x620/0x620 [ 1235.179824] ? __sb_end_write+0xd9/0x110 [ 1235.183898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1235.189436] ? fput+0x130/0x1a0 [ 1235.192717] ? do_syscall_64+0x9a/0x820 [ 1235.196704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.202247] ? security_file_ioctl+0x94/0xc0 [ 1235.206668] ksys_ioctl+0xa9/0xd0 [ 1235.210128] __x64_sys_ioctl+0x73/0xb0 [ 1235.214021] do_syscall_64+0x1b9/0x820 [ 1235.217917] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1235.223286] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1235.228217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1235.233062] ? trace_hardirqs_on_caller+0x310/0x310 [ 1235.238083] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1235.243103] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1235.248135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1235.252991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1235.258187] RIP: 0033:0x457669 [ 1235.261400] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1235.280301] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.288033] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1235.295304] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1235.302572] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.309842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1235.317112] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 00:34:24 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000000)={0x80000f010000, 0x0, 0x0, [], 0x0}) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r6, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) eventfd(0x2) 00:34:24 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r4) close(r3) 00:34:24 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:24 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:24 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x491]}) [ 1235.495929] FAULT_INJECTION: forcing a failure. [ 1235.495929] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.534557] CPU: 0 PID: 4447 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1235.541872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.551232] Call Trace: [ 1235.553830] dump_stack+0x1d3/0x2c6 [ 1235.557473] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1235.562670] ? mark_held_locks+0x130/0x130 [ 1235.566910] ? up_write+0x7b/0x220 [ 1235.570467] should_fail.cold.4+0xa/0x17 [ 1235.574543] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1235.579655] ? __drm_mode_object_find+0x33/0x210 [ 1235.584439] ? arch_local_save_flags+0x40/0x40 [ 1235.589028] ? graph_lock+0x270/0x270 [ 1235.592839] ? graph_lock+0x270/0x270 [ 1235.596660] ? find_held_lock+0x36/0x1c0 [ 1235.600732] ? __lock_is_held+0xb5/0x140 [ 1235.604801] ? ext4_mb_new_blocks+0x43f8/0x4840 [ 1235.609490] ? ___might_sleep+0x1ed/0x300 [ 1235.613641] ? arch_local_save_flags+0x40/0x40 [ 1235.618257] ? arch_local_save_flags+0x40/0x40 [ 1235.622858] __should_failslab+0x124/0x180 [ 1235.627106] should_failslab+0x9/0x14 [ 1235.630910] kmem_cache_alloc_trace+0x2d7/0x750 [ 1235.635588] ? drm_modeset_lock+0x178/0x5c0 [ 1235.639936] drm_atomic_state_alloc+0xb8/0x110 [ 1235.644575] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1235.650000] __setplane_atomic+0x2a3/0x330 [ 1235.654249] setplane_internal+0x127/0x370 [ 1235.658517] ? __setplane_internal+0x5e0/0x5e0 [ 1235.663120] ? mutex_unlock+0xd/0x10 [ 1235.666845] ? __drm_mode_object_find+0xb8/0x210 [ 1235.671616] drm_mode_setplane+0x567/0x830 [ 1235.675865] ? drm_is_current_master+0x51/0x140 [ 1235.680548] drm_ioctl_kernel+0x278/0x330 [ 1235.684702] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1235.689552] ? drm_setversion+0x8b0/0x8b0 [ 1235.693717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1235.699262] ? _copy_from_user+0xdf/0x150 [ 1235.703430] drm_ioctl+0x593/0xb90 [ 1235.706978] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1235.711838] ? drm_version+0x3d0/0x3d0 [ 1235.715742] ? ___might_sleep+0x1ed/0x300 [ 1235.719904] ? arch_local_save_flags+0x40/0x40 [ 1235.724504] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1235.729445] ? drm_version+0x3d0/0x3d0 [ 1235.733339] do_vfs_ioctl+0x1de/0x1790 [ 1235.737257] ? ioctl_preallocate+0x300/0x300 [ 1235.741677] ? selinux_file_mprotect+0x620/0x620 [ 1235.746947] ? __sb_end_write+0xd9/0x110 [ 1235.751022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1235.756563] ? fput+0x130/0x1a0 [ 1235.759849] ? do_syscall_64+0x9a/0x820 [ 1235.763841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.769403] ? security_file_ioctl+0x94/0xc0 [ 1235.773839] ksys_ioctl+0xa9/0xd0 [ 1235.777320] __x64_sys_ioctl+0x73/0xb0 [ 1235.781218] do_syscall_64+0x1b9/0x820 [ 1235.785116] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1235.790488] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1235.795445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1235.800292] ? trace_hardirqs_on_caller+0x310/0x310 [ 1235.805316] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1235.810341] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1235.815389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1235.820260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1235.825464] RIP: 0033:0x457669 [ 1235.828663] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:34:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1235.847572] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.855293] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1235.862567] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1235.869840] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.877111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1235.884389] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 00:34:24 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:24 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r4) close(r3) 00:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x3b00]}) 00:34:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffc0189436, &(0x7f0000000080)) [ 1236.172873] FAULT_INJECTION: forcing a failure. [ 1236.172873] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.185038] CPU: 0 PID: 4471 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1236.192327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.192342] Call Trace: [ 1236.192368] dump_stack+0x1d3/0x2c6 [ 1236.192414] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1236.213141] ? debug_smp_processor_id+0x1c/0x20 [ 1236.217820] ? perf_trace_lock+0x14d/0x7a0 [ 1236.222071] should_fail.cold.4+0xa/0x17 [ 1236.226147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1236.231256] ? __kernel_text_address+0xd/0x40 [ 1236.235757] ? unwind_get_return_address+0x61/0xa0 [ 1236.240705] ? graph_lock+0x270/0x270 [ 1236.244525] ? find_held_lock+0x36/0x1c0 [ 1236.248608] ? __lock_is_held+0xb5/0x140 [ 1236.252692] ? ___might_sleep+0x1ed/0x300 [ 1236.256847] ? arch_local_save_flags+0x40/0x40 [ 1236.261436] ? graph_lock+0x270/0x270 [ 1236.265258] __should_failslab+0x124/0x180 [ 1236.269500] should_failslab+0x9/0x14 [ 1236.273335] __kmalloc+0x2e0/0x770 [ 1236.276882] ? __lock_is_held+0xb5/0x140 [ 1236.280951] ? drm_atomic_state_init+0x171/0x3b0 [ 1236.285717] drm_atomic_state_init+0x171/0x3b0 [ 1236.290306] ? rcu_read_lock_sched_held+0x108/0x120 [ 1236.295327] ? __drm_atomic_state_free+0xf0/0xf0 [ 1236.300130] drm_atomic_state_alloc+0xd0/0x110 [ 1236.304722] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1236.310119] __setplane_atomic+0x2a3/0x330 [ 1236.314369] setplane_internal+0x127/0x370 [ 1236.318638] ? __setplane_internal+0x5e0/0x5e0 [ 1236.323241] ? mutex_unlock+0xd/0x10 [ 1236.326959] ? __drm_mode_object_find+0xb8/0x210 [ 1236.331727] drm_mode_setplane+0x567/0x830 [ 1236.335973] ? drm_is_current_master+0x51/0x140 [ 1236.340687] drm_ioctl_kernel+0x278/0x330 [ 1236.344859] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1236.349712] ? drm_setversion+0x8b0/0x8b0 [ 1236.353876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1236.359428] ? _copy_from_user+0xdf/0x150 [ 1236.363586] drm_ioctl+0x593/0xb90 [ 1236.367135] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1236.371994] ? drm_version+0x3d0/0x3d0 [ 1236.375901] ? ___might_sleep+0x1ed/0x300 [ 1236.380061] ? arch_local_save_flags+0x40/0x40 [ 1236.384654] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1236.389600] ? drm_version+0x3d0/0x3d0 [ 1236.393502] do_vfs_ioctl+0x1de/0x1790 [ 1236.397416] ? ioctl_preallocate+0x300/0x300 [ 1236.401840] ? selinux_file_mprotect+0x620/0x620 [ 1236.406608] ? __sb_end_write+0xd9/0x110 [ 1236.410682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1236.416222] ? fput+0x130/0x1a0 [ 1236.419508] ? do_syscall_64+0x9a/0x820 [ 1236.423501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1236.429044] ? security_file_ioctl+0x94/0xc0 [ 1236.433463] ksys_ioctl+0xa9/0xd0 [ 1236.436947] __x64_sys_ioctl+0x73/0xb0 [ 1236.440844] do_syscall_64+0x1b9/0x820 [ 1236.444740] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1236.450113] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1236.455064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1236.459913] ? trace_hardirqs_on_caller+0x310/0x310 [ 1236.464945] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1236.469970] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1236.475001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1236.479859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1236.485051] RIP: 0033:0x457669 [ 1236.488250] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1236.507183] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.514934] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1236.522205] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1236.529472] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1236.536742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1236.544016] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 00:34:25 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffff00004b49, &(0x7f0000000080)) 00:34:25 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r4) close(r3) 00:34:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x4d0]}) 00:34:25 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043000000000000005cc58d0ac497bf2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f71ef6f079ad28472924000000000000000000000000000000000000000000000000000000000000000000000000000000000000001acc88236fa663aeef2a8735d9312f776d937981f0de37912300786786f9f653e9c7d491ce6b37420a961d1432460308a0761de441ead281f0a924b0133d864f665986a995658f6f56231272cd3999395d52d0517c0c8aff10c3858fcae16b4291add03c6c763ae54190014a3c57e3744764dbc34d43be4c873d347b10f76c0522600c107c876c314c356f980b8aba040000000000000022b90962eccfdfbdccbb531ae4b10d304b5b0800000074c8db1a7d6788b9cfc6903c357023999e5650e68bf90bf8ebdf797de36d41d360173a873950"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r5, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$rds(r2, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000680)={0x6, 0x0, @name="29a31c78ad4e146e82fc882d9502084f9ed73dede589c4bbe649663b0d03b5f2"}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000640)=r6) eventfd(0x2) 00:34:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) r2 = dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x7ff, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) [ 1236.786686] FAULT_INJECTION: forcing a failure. [ 1236.786686] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.804149] CPU: 1 PID: 4497 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1236.811480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.820843] Call Trace: [ 1236.823448] dump_stack+0x1d3/0x2c6 [ 1236.823475] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1236.823500] ? debug_smp_processor_id+0x1c/0x20 [ 1236.823525] ? perf_trace_lock+0x14d/0x7a0 [ 1236.832341] should_fail.cold.4+0xa/0x17 [ 1236.832364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1236.832399] ? save_stack+0x43/0xd0 [ 1236.832414] ? kasan_kmalloc+0xc7/0xe0 [ 1236.832426] ? __kmalloc+0x15b/0x770 [ 1236.832440] ? drm_atomic_state_init+0x171/0x3b0 [ 1236.832458] ? drm_atomic_state_alloc+0xd0/0x110 [ 1236.871217] ? graph_lock+0x270/0x270 [ 1236.871236] ? drm_mode_setplane+0x567/0x830 [ 1236.871254] ? drm_ioctl+0x593/0xb90 [ 1236.871271] ? do_vfs_ioctl+0x1de/0x1790 [ 1236.871287] ? ksys_ioctl+0xa9/0xd0 [ 1236.871302] ? __x64_sys_ioctl+0x73/0xb0 [ 1236.871322] ? do_syscall_64+0x1b9/0x820 [ 1236.880074] ? find_held_lock+0x36/0x1c0 [ 1236.880098] ? __lock_is_held+0xb5/0x140 [ 1236.880128] ? ___might_sleep+0x1ed/0x300 [ 1236.880145] ? arch_local_save_flags+0x40/0x40 [ 1236.880173] __should_failslab+0x124/0x180 [ 1236.920662] should_failslab+0x9/0x14 [ 1236.924469] __kmalloc+0x2e0/0x770 [ 1236.928021] ? __lock_is_held+0xb5/0x140 [ 1236.932088] ? drm_atomic_state_init+0x20b/0x3b0 [ 1236.936851] drm_atomic_state_init+0x20b/0x3b0 [ 1236.941441] ? rcu_read_lock_sched_held+0x108/0x120 [ 1236.946463] ? __drm_atomic_state_free+0xf0/0xf0 [ 1236.951233] drm_atomic_state_alloc+0xd0/0x110 [ 1236.955827] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1236.961243] __setplane_atomic+0x2a3/0x330 [ 1236.965494] setplane_internal+0x127/0x370 [ 1236.969743] ? __setplane_internal+0x5e0/0x5e0 [ 1236.974346] ? mutex_unlock+0xd/0x10 [ 1236.978069] ? __drm_mode_object_find+0xb8/0x210 [ 1236.982839] drm_mode_setplane+0x567/0x830 [ 1236.987089] ? drm_is_current_master+0x51/0x140 [ 1236.991782] drm_ioctl_kernel+0x278/0x330 [ 1236.995943] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1237.000794] ? drm_setversion+0x8b0/0x8b0 [ 1237.004956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1237.010519] ? _copy_from_user+0xdf/0x150 [ 1237.014677] drm_ioctl+0x593/0xb90 [ 1237.018220] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1237.023076] ? drm_version+0x3d0/0x3d0 [ 1237.026982] ? ___might_sleep+0x1ed/0x300 [ 1237.031134] ? arch_local_save_flags+0x40/0x40 [ 1237.035725] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1237.040669] ? drm_version+0x3d0/0x3d0 [ 1237.044567] do_vfs_ioctl+0x1de/0x1790 [ 1237.048472] ? ioctl_preallocate+0x300/0x300 [ 1237.052888] ? selinux_file_mprotect+0x620/0x620 [ 1237.057661] ? __sb_end_write+0xd9/0x110 [ 1237.061734] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1237.067278] ? fput+0x130/0x1a0 [ 1237.070572] ? do_syscall_64+0x9a/0x820 [ 1237.074565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.080107] ? security_file_ioctl+0x94/0xc0 [ 1237.084546] ksys_ioctl+0xa9/0xd0 [ 1237.088015] __x64_sys_ioctl+0x73/0xb0 [ 1237.091916] do_syscall_64+0x1b9/0x820 [ 1237.095811] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1237.101184] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1237.106119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1237.110971] ? trace_hardirqs_on_caller+0x310/0x310 [ 1237.115993] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1237.121014] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1237.126045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1237.130911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.136103] RIP: 0033:0x457669 [ 1237.139303] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1237.158208] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.165923] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1237.173196] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1237.180468] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 00:34:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffc0045878, &(0x7f0000000080)) [ 1237.187741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1237.195014] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 00:34:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffff0000541b, &(0x7f0000000080)) 00:34:25 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) r2 = dup2(r1, r0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x15) mincore(&(0x7f0000fe1000/0x1000)=nil, 0x1000, 0x0) 00:34:25 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r4) close(r3) [ 1237.348021] FAULT_INJECTION: forcing a failure. [ 1237.348021] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.389014] CPU: 0 PID: 4521 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1237.396321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.405683] Call Trace: [ 1237.408293] dump_stack+0x1d3/0x2c6 [ 1237.411949] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1237.417178] should_fail.cold.4+0xa/0x17 [ 1237.421264] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1237.426370] ? kasan_kmalloc+0xc7/0xe0 [ 1237.430270] ? graph_lock+0x270/0x270 [ 1237.434099] ? drm_atomic_helper_disable_plane+0x3a/0x200 [ 1237.439638] ? __setplane_atomic+0x2a3/0x330 [ 1237.444049] ? setplane_internal+0x127/0x370 [ 1237.448466] ? do_vfs_ioctl+0x1de/0x1790 [ 1237.452513] ? ksys_ioctl+0xa9/0xd0 [ 1237.456139] ? __x64_sys_ioctl+0x73/0xb0 [ 1237.460198] ? do_syscall_64+0x1b9/0x820 [ 1237.464249] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.469614] ? graph_lock+0x270/0x270 [ 1237.473447] ? find_held_lock+0x36/0x1c0 [ 1237.477514] ? __lock_is_held+0xb5/0x140 [ 1237.481585] ? ___might_sleep+0x1ed/0x300 [ 1237.485724] ? arch_local_save_flags+0x40/0x40 [ 1237.490295] ? ww_mutex_lock_interruptible+0x41/0xb0 [ 1237.495404] __should_failslab+0x124/0x180 [ 1237.499642] should_failslab+0x9/0x14 [ 1237.503449] kmem_cache_alloc_trace+0x2d7/0x750 [ 1237.508108] ? drm_atomic_state_init+0x27a/0x3b0 [ 1237.512853] ? rcu_read_lock_sched_held+0x108/0x120 [ 1237.517906] vkms_plane_duplicate_state+0x49/0x120 [ 1237.522871] drm_atomic_get_plane_state+0x225/0x560 [ 1237.527882] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1237.533251] __setplane_atomic+0x2a3/0x330 [ 1237.537492] setplane_internal+0x127/0x370 [ 1237.541721] ? __setplane_internal+0x5e0/0x5e0 [ 1237.546317] ? mutex_unlock+0xd/0x10 [ 1237.550022] ? __drm_mode_object_find+0xb8/0x210 [ 1237.554861] drm_mode_setplane+0x567/0x830 [ 1237.559101] ? drm_is_current_master+0x51/0x140 [ 1237.563802] drm_ioctl_kernel+0x278/0x330 [ 1237.567956] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1237.572788] ? drm_setversion+0x8b0/0x8b0 [ 1237.576937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1237.582469] ? _copy_from_user+0xdf/0x150 [ 1237.586610] drm_ioctl+0x593/0xb90 [ 1237.590147] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1237.594983] ? drm_version+0x3d0/0x3d0 [ 1237.598875] ? ___might_sleep+0x1ed/0x300 [ 1237.603014] ? arch_local_save_flags+0x40/0x40 [ 1237.607592] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1237.612538] ? drm_version+0x3d0/0x3d0 [ 1237.616432] do_vfs_ioctl+0x1de/0x1790 [ 1237.620334] ? ioctl_preallocate+0x300/0x300 [ 1237.624736] ? selinux_file_mprotect+0x620/0x620 [ 1237.629485] ? __sb_end_write+0xd9/0x110 [ 1237.633553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1237.639075] ? fput+0x130/0x1a0 [ 1237.642369] ? do_syscall_64+0x9a/0x820 [ 1237.646412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.651949] ? security_file_ioctl+0x94/0xc0 [ 1237.656367] ksys_ioctl+0xa9/0xd0 [ 1237.659897] __x64_sys_ioctl+0x73/0xb0 [ 1237.663804] do_syscall_64+0x1b9/0x820 [ 1237.667703] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1237.673076] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1237.678002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1237.682858] ? trace_hardirqs_on_caller+0x310/0x310 [ 1237.687879] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1237.692899] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1237.697921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1237.702760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.707953] RIP: 0033:0x457669 [ 1237.711149] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1237.730045] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:34:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffff4020940d, &(0x7f0000000080)) 00:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0xff02000000000000]}) [ 1237.737768] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1237.745064] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1237.752328] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1237.759584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1237.766846] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 00:34:26 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) 00:34:26 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000007c0)=0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "1ac29a5531f206034cdcc29857acea4d6ac8c3801238b070e115b5b3cdac5336", "9b34621f63695de816bd4fb92b01b084eda08003a7e5b994c61b6ece6314d587", "32cd5af974f12929b523a30ae30dae4eba15f6b22fcc9b07aaa6022353b4478e", "b9baaa1d74c4a743e8a13ff37a2ad31675aa38ca5ca2351a56437a8d2df294f2", "a59c17b80305b6e126e975cf8e1e5c2851fc8e96681aa2ff0113bc64c6edb860", "b0aecb5257c7dfc8ba27db83", 0x9, 0x39, 0x3, 0x1, 0x100000000}}) close(r4) close(r3) 00:34:26 executing program 2: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000007c0)=0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) clock_gettime(0x0, &(0x7f0000000900)) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffff8, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x1ec, r4, 0x230, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b9dfd7b}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x12}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000880)=0x67) bind$rds(r1, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x0, 0x0, 0x28f}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000000940)=""/227, 0xe3}, {&(0x7f00000006c0)=""/79, 0x4f}], 0x4) eventfd(0x2) 00:34:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x143) r2 = dup2(r1, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x7ff}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x48012, r0, 0x55) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @local}}, 0xfffffffffffffffe, 0x2, 0x7fffffff, 0x4, 0x30}, 0x98) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0) 00:34:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffff80087601, &(0x7f0000000080)) 00:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x78, 0x0, [0x8000000487, 0x9e000000]}) [ 1238.003965] FAULT_INJECTION: forcing a failure. [ 1238.003965] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.049013] CPU: 0 PID: 4555 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1238.056336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.065694] Call Trace: [ 1238.068296] dump_stack+0x1d3/0x2c6 [ 1238.071973] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1238.077180] ? __kernel_text_address+0xd/0x40 [ 1238.081688] ? unwind_get_return_address+0x61/0xa0 [ 1238.086640] should_fail.cold.4+0xa/0x17 [ 1238.086661] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1238.086691] ? save_stack+0x43/0xd0 [ 1238.099481] ? kasan_kmalloc+0xc7/0xe0 [ 1238.103409] ? kmem_cache_alloc_trace+0x152/0x750 [ 1238.108265] ? vkms_plane_duplicate_state+0x49/0x120 [ 1238.113435] ? drm_atomic_get_plane_state+0x225/0x560 [ 1238.118647] ? graph_lock+0x270/0x270 [ 1238.122454] ? drm_mode_setplane+0x567/0x830 [ 1238.126861] ? drm_ioctl_kernel+0x278/0x330 [ 1238.131180] ? drm_ioctl+0x593/0xb90 [ 1238.134901] ? do_vfs_ioctl+0x1de/0x1790 [ 1238.138963] ? ksys_ioctl+0xa9/0xd0 [ 1238.142602] ? __x64_sys_ioctl+0x73/0xb0 [ 1238.146679] ? do_syscall_64+0x1b9/0x820 [ 1238.150747] ? find_held_lock+0x36/0x1c0 [ 1238.154812] ? __lock_is_held+0xb5/0x140 [ 1238.158880] ? ___might_sleep+0x1ed/0x300 [ 1238.163025] ? arch_local_save_flags+0x40/0x40 [ 1238.167621] __should_failslab+0x124/0x180 [ 1238.171850] should_failslab+0x9/0x14 [ 1238.175655] kmem_cache_alloc_trace+0x2d7/0x750 [ 1238.180340] ? drm_atomic_state_init+0x27a/0x3b0 [ 1238.185096] ? rcu_read_lock_sched_held+0x108/0x120 [ 1238.190103] vkms_plane_duplicate_state+0x92/0x120 [ 1238.195065] drm_atomic_get_plane_state+0x225/0x560 [ 1238.200084] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1238.205441] __setplane_atomic+0x2a3/0x330 [ 1238.209680] setplane_internal+0x127/0x370 [ 1238.213940] ? __setplane_internal+0x5e0/0x5e0 [ 1238.218535] ? mutex_unlock+0xd/0x10 [ 1238.222251] ? __drm_mode_object_find+0xb8/0x210 [ 1238.227023] drm_mode_setplane+0x567/0x830 [ 1238.231278] ? drm_is_current_master+0x51/0x140 [ 1238.235966] drm_ioctl_kernel+0x278/0x330 [ 1238.240101] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1238.244943] ? drm_setversion+0x8b0/0x8b0 [ 1238.249097] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1238.254627] ? _copy_from_user+0xdf/0x150 [ 1238.258778] drm_ioctl+0x593/0xb90 [ 1238.262331] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1238.267172] ? drm_version+0x3d0/0x3d0 [ 1238.271065] ? ___might_sleep+0x1ed/0x300 [ 1238.275216] ? arch_local_save_flags+0x40/0x40 [ 1238.279805] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1238.284742] ? drm_version+0x3d0/0x3d0 [ 1238.288648] do_vfs_ioctl+0x1de/0x1790 [ 1238.292533] ? ioctl_preallocate+0x300/0x300 [ 1238.296943] ? selinux_file_mprotect+0x620/0x620 [ 1238.301714] ? __sb_end_write+0xd9/0x110 [ 1238.305783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1238.311306] ? fput+0x130/0x1a0 [ 1238.314577] ? do_syscall_64+0x9a/0x820 [ 1238.318553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1238.324095] ? security_file_ioctl+0x94/0xc0 [ 1238.328517] ksys_ioctl+0xa9/0xd0 [ 1238.331991] __x64_sys_ioctl+0x73/0xb0 [ 1238.335896] do_syscall_64+0x1b9/0x820 [ 1238.339800] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1238.345152] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1238.350081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1238.354941] ? trace_hardirqs_on_caller+0x310/0x310 [ 1238.359946] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1238.364951] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1238.369977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1238.374838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1238.380014] RIP: 0033:0x457669 00:34:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffff80086601, &(0x7f0000000080)) [ 1238.383208] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1238.402112] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.409812] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1238.417092] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1238.424382] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1238.431654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1238.438922] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 [ 1238.458286] WARNING: CPU: 0 PID: 4555 at drivers/gpu/drm/vkms/vkms_plane.c:26 vkms_plane_duplicate_state+0x9f/0x120 [ 1238.468899] Kernel panic - not syncing: panic_on_warn set ... [ 1238.474807] CPU: 0 PID: 4555 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #165 [ 1238.482086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.491441] Call Trace: [ 1238.494053] dump_stack+0x1d3/0x2c6 [ 1238.497700] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1238.499869] kobject: 'loop0' (00000000a05cf94e): kobject_uevent_env [ 1238.502931] panic+0x2ad/0x55c [ 1238.502950] ? add_taint.cold.5+0x16/0x16 [ 1238.502973] ? __warn.cold.8+0x5/0x45 [ 1238.502994] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1238.521538] kobject: 'loop0' (00000000a05cf94e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1238.525690] __warn.cold.8+0x20/0x45 [ 1238.525712] ? rcu_softirq_qs+0x20/0x20 [ 1238.525731] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1238.525749] report_bug+0x254/0x2d0 [ 1238.525770] do_error_trap+0x11b/0x200 [ 1238.525790] do_invalid_op+0x36/0x40 [ 1238.525804] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1238.525826] invalid_op+0x14/0x20 [ 1238.567862] RIP: 0010:vkms_plane_duplicate_state+0x9f/0x120 [ 1238.573586] Code: 00 0f 85 86 00 00 00 48 8b 3d dd 29 df 04 ba f8 00 00 00 be c0 80 60 00 e8 2e 23 79 fd 48 85 c0 49 89 c5 75 13 e8 e1 66 36 fd <0f> 0b 48 c7 c7 40 34 7b 88 e8 87 da 1c fd e8 ce 66 36 fd 48 8d bb [ 1238.577321] kobject: 'loop5' (00000000437e0d6a): kobject_uevent_env [ 1238.592496] RSP: 0018:ffff88817e7776f8 EFLAGS: 00010246 [ 1238.592509] RAX: 0000000000040000 RBX: ffff8881cd75ef00 RCX: ffffc90005a5d000 [ 1238.592518] RDX: 0000000000040000 RSI: ffffffff844850ff RDI: 0000000000000286 [ 1238.592529] RBP: ffff88817e777710 R08: ffff88817a7d06c0 R09: ffffed103b5c5b5f [ 1238.592539] R10: ffffed103b5c5b5f R11: ffff8881dae2dafb R12: ffff8881d377c940 [ 1238.592548] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88817e777860 [ 1238.592581] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1238.592602] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1238.592620] drm_atomic_get_plane_state+0x225/0x560 [ 1238.592643] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1238.592664] __setplane_atomic+0x2a3/0x330 [ 1238.653184] kobject: 'loop5' (00000000437e0d6a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1238.656009] setplane_internal+0x127/0x370 [ 1238.656038] ? __setplane_internal+0x5e0/0x5e0 [ 1238.656068] ? mutex_unlock+0xd/0x10 [ 1238.656085] ? __drm_mode_object_find+0xb8/0x210 [ 1238.656106] drm_mode_setplane+0x567/0x830 [ 1238.656125] ? drm_is_current_master+0x51/0x140 [ 1238.701352] drm_ioctl_kernel+0x278/0x330 [ 1238.705542] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1238.710442] ? drm_setversion+0x8b0/0x8b0 [ 1238.714610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1238.720166] ? _copy_from_user+0xdf/0x150 [ 1238.724328] drm_ioctl+0x593/0xb90 [ 1238.727894] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1238.727981] kobject: 'loop0' (00000000a05cf94e): kobject_uevent_env [ 1238.732791] ? drm_version+0x3d0/0x3d0 [ 1238.732819] ? ___might_sleep+0x1ed/0x300 [ 1238.732836] ? arch_local_save_flags+0x40/0x40 [ 1238.732856] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1238.757298] ? drm_version+0x3d0/0x3d0 [ 1238.761207] do_vfs_ioctl+0x1de/0x1790 [ 1238.765116] ? ioctl_preallocate+0x300/0x300 [ 1238.769545] ? selinux_file_mprotect+0x620/0x620 [ 1238.773028] kobject: 'loop0' (00000000a05cf94e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1238.774316] ? __sb_end_write+0xd9/0x110 [ 1238.774341] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1238.774355] ? fput+0x130/0x1a0 [ 1238.774372] ? do_syscall_64+0x9a/0x820 [ 1238.774410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1238.774430] ? security_file_ioctl+0x94/0xc0 [ 1238.810649] ksys_ioctl+0xa9/0xd0 [ 1238.814119] __x64_sys_ioctl+0x73/0xb0 [ 1238.818023] do_syscall_64+0x1b9/0x820 [ 1238.821924] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1238.827306] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1238.829252] kobject: 'loop5' (00000000437e0d6a): kobject_uevent_env [ 1238.832243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1238.832262] ? trace_hardirqs_on_caller+0x310/0x310 [ 1238.832280] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1238.832299] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1238.832322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1238.832345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1238.866994] kobject: 'loop5' (00000000437e0d6a): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1238.868628] RIP: 0033:0x457669 [ 1238.868646] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1238.868655] RSP: 002b:00007f47a5d17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.868671] RAX: ffffffffffffffda RBX: 00007f47a5d17c90 RCX: 0000000000457669 [ 1238.868681] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000004 [ 1238.868690] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1238.868700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47a5d186d4 [ 1238.868709] R13: 00000000004be9ae R14: 00000000004cf5e0 R15: 0000000000000005 [ 1238.879649] Kernel Offset: disabled [ 1238.949271] Rebooting in 86400 seconds..