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"], 0x188}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/40)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, "4a00189ce47e35c5259d8d7dad1644cde94e3b2a39982d735073b7a2cfe57929d3a8dda7d08b185dbb52d46829a30b887504c6d9f08aff241170b56b88de9ee500c32a454e472650920ae27b9ba84f3f"}, 0xd8)

08:44:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf031", 0x7)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:44:55 executing program 5:
r0 = socket(0x10, 0x5, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB]}}, 0x0)
syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x100, 0x400000100082)
r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod(0x0, 0xc42c, 0x5)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
getpgid(0xffffffffffffffff)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
pwritev(r0, &(0x7f0000000340), 0x366, 0x81803)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ubi_ctrl\x00', 0x400, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x7fff, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x40000004a8e, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x1000000000000}, &(0x7f0000000080)=0xc)
read$alg(r3, &(0x7f0000000240)=""/239, 0xef)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x58ef, 0x0, 0x9})
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x8, 0x2, 0x8, 0x3a0, 0x40000, 0xde})

08:44:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:44:55 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:44:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf031", 0x7)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:44:55 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r1=>0x0})
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x282, 0x7, 0x100, 0x8, 0x7, r1})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:44:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:44:55 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x10006, 0x0, 0x0, 0x50000}]})
setxattr$security_smack_entry(0x0, &(0x7f00000001c0)='security.SMACK64IPIN\x00\xf7\xe5V\xef\x9e\xdf\xbb\'\xdb\x82\xd1\xf1L[C$-\xc9rW\xb7\v\x96\xfe\xee\x04\xd2\xd9\x10\x94\xbe\xe3\xa1\xdfY\xd6\xd2e\x800\x86jL\'\xb0K\xd1\x85\xf6P\x9a\xf6\xa6\xd9R\xfd{}\xb3gH\xec\xda\x81UI\xb6{}c\x17vMY\x82\xeecp\xa9>Z9\x96\xfa\xcdC\x80\x01\x87', 0x0, 0xffffff1e, 0x101)

08:45:03 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:03 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x200)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000280))
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @frame_sync})

08:45:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf031", 0x7)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, [0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

08:45:03 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:03 executing program 5:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x33bfb45e)
clone(0x800000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
process_vm_readv(r1, &(0x7f0000000240)=[{&(0x7f0000000280)=""/61, 0x144}], 0x1, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/63, 0x3f}], 0x1, 0x0)

08:45:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000), 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

[ 1755.965448][T22647] ptrace attach of "/root/syz-executor.5"[10309] was attempted by "/root/syz-executor.5"[22647]
08:45:03 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:45:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000), 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:12 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:12 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x10006, 0x0, 0x0, 0x50000}]})
setxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64IPIN\x00', 0x0, 0xfd7d, 0x2)

08:45:12 executing program 4:
r0 = getpid()
r1 = getpgrp(0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x20, 0x2c0100)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x401, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x7f, [], 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x3c)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000180)={r3, r4, 0x1})
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init1(0x80800)
preadv(r5, &(0x7f00000017c0), 0x1be, 0x0)

08:45:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000), 0x0)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab", 0x4)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:12 executing program 5:
socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="756d13b3f9ae3879d870a27c2988a59b6ed0afead1e2d904a8d17048f847651f58504c4f88b200407109fb91fe7f7bab8868a469a1e2c3e2eeb2923d6861ddad95e131b599f8dd41638695c740a0fe42724524772840602cbd0dfb6a3bea2d38c60db7835a9716c924", 0x69, 0xfffffffffffffffe)
keyctl$update(0x2, r0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300), 0x2)
pipe(&(0x7f0000000600))
mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0)

08:45:12 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
clock_gettime(0x0, &(0x7f00000055c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/170, 0xaa}, 0x2}, {{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001280)=""/174, 0xae}, {&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001440)=""/209, 0xd1}, {&(0x7f0000001540)=""/163, 0xa3}, {&(0x7f0000001600)=""/229, 0xe5}, {&(0x7f0000001700)=""/37, 0x25}], 0x6}, 0x9}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/191, 0xbf}, {&(0x7f0000001900)=""/42, 0x2a}, {&(0x7f0000001940)=""/78, 0x4e}, {&(0x7f00000019c0)=""/8, 0x8}, {&(0x7f0000001a00)=""/27, 0x1b}], 0x5, &(0x7f0000001ac0)=""/60, 0x3c}, 0x7}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001b00)=""/186, 0xba}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x5}, {{&(0x7f0000002c80)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002d00)=""/83, 0x53}, {&(0x7f0000002d80)=""/7, 0x7}, {&(0x7f0000002dc0)=""/247, 0xf7}, {&(0x7f0000002ec0)=""/88, 0x58}, {&(0x7f0000002f40)=""/187, 0xbb}, {&(0x7f0000003000)=""/248, 0xf8}, {&(0x7f0000003180)=""/204, 0xcc}, {&(0x7f0000003100)=""/3, 0x3}], 0x8, &(0x7f0000003300)=""/228, 0xe4}, 0xffffffffffffffff}, {{&(0x7f0000003400)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/147, 0x93}, {&(0x7f0000003540)=""/35, 0x23}, {&(0x7f0000003580)=""/44, 0x2c}], 0x3, &(0x7f0000003600)=""/70, 0x46}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003680)=""/78, 0x4e}, {&(0x7f0000003700)=""/111, 0x6f}, {&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f0000003840)=""/197, 0xc5}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/82, 0x52}, {&(0x7f0000003a80)=""/77, 0x4d}], 0x7}, 0x7}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003b80)=""/99, 0x63}, {&(0x7f0000003c00)=""/194, 0xc2}, {&(0x7f0000003d00)=""/44, 0x2c}], 0x3}}, {{&(0x7f0000003d80)=@rc, 0x80, &(0x7f0000005280)=[{&(0x7f0000003e00)=""/125, 0x7d}, {&(0x7f0000003e80)=""/56, 0x38}, {&(0x7f0000003ec0)=""/125, 0x7d}, {&(0x7f0000003f40)=""/179, 0xb3}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/177, 0xb1}, {&(0x7f00000050c0)=""/177, 0xb1}, {&(0x7f0000005180)=""/242, 0xf2}], 0x8, &(0x7f0000005300)=""/93, 0x5d}, 0x9}], 0x9, 0x40000001, &(0x7f0000005600)={r1, r2+30000000})
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f00000017c0), 0x1be, 0x0)

08:45:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab", 0x4)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:13 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/net/pfkey\x00', 0x88002, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/242, 0xf2)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000001680)=0x6, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000200)='net/unix\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)
readv(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/196, 0xc4}], 0x5)

08:45:21 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:21 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab", 0x4)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:21 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:21 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x782, 0x0, 0x0, 0x7}}}, 0x60)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

08:45:21 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000280)=""/231, 0x2eb}, {&(0x7f0000000380)=""/4096, 0xfce3}], 0x3, 0x0)

08:45:22 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4802, 0x0)
r2 = getpgid(0xffffffffffffffff)
r3 = getpgid(0x0)
sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x504, 0x9, 0x7, 0x0, 0x70bd2d, 0x25dfdbff, {0xc, 0x0, 0x8}, [@generic="c15f4faf3130cb41399a8a3e98bfeeb75ba8e5fb58b31c32273dcde2fcd2e8e8fb95c4e747a08b5b22ba22ed0dd055bd3966596616844a7039a44c90af9421273dcf3454abd839", @generic="fb5cfc9d3dc7a3d4235db3a4704b3029d7248bf5f033b67dcddc11a28d305f910fb708b21f53ac59454ddd96cc599a9351b3757d1919a10d99bf0655cfc5fc5eaf313faf65d856bdb6684c2b6ddae6927d07972553fe11498f42a76491fd1ca4", @typed={0x8, 0x6e, @pid=r2}, @generic="c609491395d8b06a69fcac78a610e1ea06d608326c9c34ee2b24c42da24e317651f605fa1c556fcafc3a3b81f4e4bddab9abab8de2b8b57e1122e334c0658a08bbef40429520e3db7619bb8042815e48f4e10e874eb021e53c9eccf477a1c936b0ccedd4cc2da13b46e22ea50a4cdae1545b79c88f200f49087ae16e2d5c76598e6e879a0b2ad1765472", @generic="1fe724d890da42b9acd3f3bf68b4ee1268eedcca46dd4944e7340e1ec212eda6fcfd8e1e8258ff9223f487c66a21c752ed7c764d7db985f504797b1ae13eb726a94abf9689cdda5989f8c820dd138eac6e05c6dd1ef7d940674cb26a0fa6fb4d801d093480d04bf47545d478e1faf30b1c13e2886c41746fea58d7759d8ed0d05428eda83fe25eb83ecae4e04340b71a761e32348280f489aed1d732378f524c333188a85ffcec921259e7c5192ec3e12f106e69a45f048794759a593f46e3202b69dbfeed7511ed85928159969a04a675063c1bf6819657383aa9b78685260119af1f2d664ce28e17", @typed={0x8, 0x8c, @u32=0x8}, @nested={0x110, 0x57, [@typed={0x8, 0x1f, @pid=r3}, @typed={0x8, 0x19, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="d9a1f70467355b90f5ea79e5e689b446404732ae4fa9818d0ed422433aafb4d7209b794ee9b4be2dce66bbcb", @generic="be228531c358ea80d8708a49accd6ab141548de5d897e293e7cb86427151c0b14dad5d960275330af1b2fcbd3c668ee1b28e5205b6b27108ee42464d6e418fb5d9a1650d0e90e03ef371f6c9dcf688f139e940b41cacbdc4b597ea71872f99f1ef3f94f7a3", @generic="e38545fce6db91255e05b17710974677644af50fb630e447000bea9deffc7e050e4015885f0c122428ed328b2765cd7bb328743390011533606938fee1a71320293822e89beb4a0be5cfe4ec0416dcbaf35ca70a3285c174a4b49bd485b93e22a15eb9c5287211f3be2e"]}, @generic="b4b3f94e6a95500807722547f80643334a4a63009a41c45a3942027dd560567bb7ca8befba6a4b7cd1a9374ee24b6cf0a25c99bf17ee4ee0a303d8a877ce592482c19f6eebd97926761447fb863cc2f3f65af5818dc784d090d318b1e0d1511dc8e055d243a0783389e34866a893cb80d093afbf15eb910d04cb5d90322b5ed62e6df4cc9fe0fc90b9147fcb79508c6786bc63c00217077bbbb06a3ce3b4d9cb1c38fe5deea258de6e47d29acdf0094e8534d448349e1dfd5e6fc7a6b84ab582cf3fbebc29b733ba938e9218b29c04", @generic="5dce005ba5bb3860121ff37b92e5a6c142e40a673356048faa0f6c645a865e55229e138810e53173378691392e55df4fd92647d4bf014468938a1667763f873a391f5084446f356ebf08d60fb21d19f28ea12b5b7364b9912f2fb45b6410537666cc6fe4341db033c8b23f8c8e9257c478d126f76b7dc5dbe4631c61466e51ddb492f4bd301f5ee940219c7e41292952eaea6b06ac6b5a441a58f81280", @generic="6d63a666e3b2e33dbb680122e2b5358ec17e25d0b6030a6a897f1664eeb6c1ae466456e88cc9fa6a55d4595f29244a1aa32f464489583b6cfe189a79b64fff2629b15aacdebf6d50fa"]}, 0x504}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:45:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b", 0x6)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b", 0x6)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:22 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6080, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)

08:45:28 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:28 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b", 0x6)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:28 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:28 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:28 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x9b}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
sendmsg$nl_route(r0, &(0x7f0000005480)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005440)={&(0x7f0000003100)=ANY=[@ANYBLOB="300000002100200329bd7000fddbdf25020000c005000000000000000000000000000000ac1e010108000b0004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x804)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
sendmmsg$sock(r0, &(0x7f0000005240)=[{{&(0x7f00000000c0)=@generic={0x4, "8568ce2841d4f15a31391bc6c413f75eafc476ff14a0607aed0d69c2737917bade25d77c4d131247d07965d78aec20de8fb99a139eb231fb214b2c1f2744c6379183313827e0b18b748c53842c3060e6ae5dc1f0b94f8e376b523828cef2e2b55c1a8b9db36e128511ce4ed96c74b05a07e212014e6f897177601c323dd0"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="db111b521f7e3f9b31f6ca15192c541edee9eb977f2f54f96c51d2df67a2b5b6a2f5b852774f6f4d38021f8f112beaa47b956a9c87b357dad111af834c3ec25141cce6ce3f6c84de550cc0ed9e85bf6633058eb53b21e96e946a82e6bd56bac4bba0ca31fa26", 0x66}, {&(0x7f0000000280)="0bb1209daf92202c8d26b1f86992a187d17089c759a780431dc004e8796ad2efbc393f4ca69788c2a3d3ba981b731e252ef769fbee59d4e3636e27bed00fab7d4b845e482d16ab69b67b69f297aaa0adab49ee64462243b07b14f1b8355a6b7ca36cb3fba6518c0848dafdca7d022e7ee09f941a77dd8d754b1d60e1aed11fa70d021093e824cccb2a41006a498a9f75d1d8f17635ec452f6395dddb4f2cf311ef6def6ded1e62035952457b72692a0738a3366f5d47ad17f0698d5ec89db7a0d33585c3a55e1eb8c4d76e870611ee7308b923997bb56abbdf84215d35fabc31ba9d797db79396aaa0f50a185910", 0xee}, {&(0x7f0000000380)="9519280b83d700adbbddb4624a9ac8404841530d501cb18e4786f18849b9ac701811adb2f8fb2cf3e56c15069cc3557a649acc4d2122daabd5712506cc5e8a619f0f9576f6e83cacc2bca4a9c13b482d7c055126dc0a95c6d760f5948a7c3fa08ac429c2a1581c98dfa63dd7f6c3dd7ddf1402ccd7a2005209f0febb24bcff00b8b139647579cddd39342e0498c9f292d7fe43dfeedca116ac", 0x99}, {&(0x7f0000000440)="1894932124bdefb8c0a11ade3d89d1e3af612a62f1b6812fcfffe3e29490fe267b4c1b55b5a581f11f578ae30bdeb908c5ee56379889e4cc1e3766667ea1f8b101c58692b5eae2de31fbd227d65d805655ea5ae7b9132a7b8eb6b82a68f699be522cf901c9a057bf1d6fa7c5f2158957f541aaefaeae467d2961c1ec443a0d095bb7eb9b20b0e409c4f2116ae1bfd661d581bccb00293c98577391978f6d1f6ce06ed405fdb1d88e9f62efc07914dea9e5216a4b4e3d9454dc29edcb62fedd8d1755a5ca133a5b0bea97ab60f8d28696b27888f1c12874bbe2cee6434ad80fd0787e954d07a76eaa4d1bbfc157f2", 0xee}, {&(0x7f0000000540)="137939400558d0ec371ca198d150a223bef8e9fcd3ec9db4d23f103e6a685d9a95e0177f6dea0563295896482f217b845d0c745055fca3737f7af8d44cc65992f8f08709b14bd27d279f65e1d65bbc3644cef6cbb301c159948383c75f50cad1a9d389a249d306aafc26142840a70af6cbbb32d92f4916c1bd1a4d074345c6b1641c67f0378e752220c9f90b6e", 0x8d}, {&(0x7f0000000600)="fc794d251e0b8d2a40522b79a303aac1fb8a2021e35642287cb7e9d868c5e74f488a75ee99a5f102125215b9eca21a281229727f7b696c254902e4ca926eee5d0abb00657748182cddd7a9a816602828e095ee0c6747ac279c26f2e7ea5ad0505ee9a0026fda6cb60ec1ccaf5fdfac93cef8fae7d4f58fcc27c695327cf936c71874", 0x82}, {&(0x7f00000006c0)="7b4eb829e3df5d3d7b11dd6beb75ef4df9c9a74a98177133fff2d9da366adba92f8c5e80c2373c8606173f61dbec895322d44573d184e8d208ea1592f9a8394216c04b4a04d99910dbf48628d6a6f50e93f09efbaa2f1c154e685e64caf846910193a8c5db639dfa24566b202dace85a5f1816a5a0aede066ac112ccbad20c7228adcdad04d4d7c4764de0d83312d70aeb2ac490a7d1cd71550570478e400b03c1873efaa48e4659bf1bd2a9304489191533a8bb3cbb0c52aaf5462213f313d63a86dccc0ff5fa54ea633007fa6aaeabf4717aedc9", 0xd5}], 0x7, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, &(0x7f0000001880)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x6d0b}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x60}}, {{&(0x7f0000001900)=@in6={0xa, 0x4e21, 0x5, @remote, 0xf5e}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001980)="5522f13f6d231b0ec7670841fe4d8f077c9de6d28aaf5b2f1c646e6ac282d18b7ce312e92a69cfd86829588481f2f1f738a947561b52666a3af847d2a6ca176579ca21cd76f4c79f8ba94d7134c36b8bdca6ec12dda63995f384139f93213ee77d2f35e15917d2e60383ef4d57ea16a0b45cccaeb7d5c0ac2a6a7ca55b4c8f98c5f8d554598d321b477668b0e31bfa0f709519089ae827f0bad2943eefdfa352a7d866dd7bb61d9594f34690b3bc69175fa26e9a53173eb3b24af6fd6d344664e2a85f7453763b205b055703348f21d9abb02d0a10a0d7cf867d70", 0xdb}, {&(0x7f0000001a80)="62fdc64164507539e324c29dee453addcec2c10e793f5f92001d4ee5f070288081e713f35a391e06d9640b7cfb607a939bb496b4714d062e07eec33d3831c38af4cd45e58265845b44ac90a3ed8c41feb4ecf93f708742e398c170", 0x5b}, {&(0x7f0000001b00)="acd1e8fc815b493026404c21b3afdd089802f23e7bcb295ab44d904309ee2dcadcb51cb9863cd10d929336be9db3507b3db2fea11b0f5e5cd5b5c040e2a3835b34ff155a87738e3ecf8ccf61f68b3d93c447c7094ab50124d96be37000167b0dea12b5cdf6682424b0b09492d2e45a460eee9c3f40713880b0af5e902ebc7671d3d6ad6a440ca787dfe404076cbbc05933f30e677f09", 0x96}, {&(0x7f0000001bc0)="dce1ff4d77f1154c20cf67347c894572ca09e50bcf04950a0710bdfc35f0503db2bcdcf6d4737e0cddb9b452e3f120dff5d722df1e434c759e155a2d94f11d0d20fd2a1b65d87b212921d8f5f768", 0x4e}, {&(0x7f0000001c40)="892b78b3ac78dc4da57b00c40f4a9ffc695782f83a376c1c30e8953a8e5fbcbcebcac86006f97ef0bd04976ec2c3c1281b21f3494638f6fadd47616d0b977ed05c58aa112f2c176bbc98576c0f5bbceec352230b1d13fd0f3d7a852ef989c5a48e296a3a28044e25f74d03cfcaaa9035f70a593e5ee35edbad41d46c837719a00b6e1a4e88b0d1569e9273e37b01caea458717e583ee684cd6196f76539298829661141d0ace5c", 0xa7}, {&(0x7f0000001d00)="c710bb5f5da0902f72e8611ca6c38cd460555deba980f72875b628d431462f40fc4e85232e9abac4b8a00ef475ad59b89562136b065a4750cf3c64263a75f51856c17e44381da98a6cd51bb081bb03f7028c0944944940582f73690d0b4302cc8923", 0x62}], 0x6, &(0x7f0000001e00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x11c8}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xa8}}, {{&(0x7f0000001ec0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)="43f2b70c38017dd9d293b6019a53f610985f11b2fc37baf5b63b6d5d66ffc446d1d4d6362178a84d00f1ebdd57aab93746f6e6511a290dfec738c5aae4145c47186466ed1024cf44f00d9501a8e33b6860c1a066eef229ced2284759c3780597793ece7145fed6554f8aec2d0187baaf7c26646eccd689617a37568cf0f73ff1c413e7e61326a9207336d4c22c8ca812e71ce211ed9a29cee3c31b65eb760d46ad38fde7e03925fe495e283c2515462c2f4fa48f23820095a8572075488ed02188b52edaaa3749136874433e7683e0ad7d5b45e4fc47a1acb65237405f17ff68ef4a52", 0xe3}, {&(0x7f0000002040)="d6e82f59e3c9dfb958f30546cd8e5a0666e80fb501c6c5a88c7769cceaec6ba46c646774b94fb138d4425c20405c8739", 0x30}, {&(0x7f0000002080)="729020591d4c3048047b429a9271485572f858282f5fcb3f4fc5943ab8e76b11c21906", 0x23}], 0x3, &(0x7f0000002100)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x30}}, {{&(0x7f0000002140)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20800000}, 0x80, &(0x7f0000002380)=[{&(0x7f00000021c0)="ccef587b5dd0dee17320225798cdd6832db32e9cc763c5be49cea0ffe0c0e3375bc51993db0211b0a1430cd993d762fb0a45c7a2956a8579870924223d201a4a43712c014f69b82b5d117c607c46b1c7ff941715", 0x54}, {&(0x7f0000002240)="4aa74ae05ea6feb96b97fea749d612306483d85e8052d8189ebe45f9f5b9fc5d1ba786cf37970efd032f23eea1f3099f9c91a9b418bdad7f912f54648f29bf47e746f2542c67768c544b8f73a38602d1855d936f2da3fe421ff51bf584750fedb9f4c76edd9c0530605a212580305f8bc8439e", 0x73}, {&(0x7f00000022c0)="f5b24b4e8f8aa55d3f5a3491a1ec36472fd292d8e830fab94f9e6632aa8e4cda5ca62c9d389ec13bcea037944e502a5bccc8439873697f2b3c08240340637257af97ac4adc87b88d0fcc159b69d65ec4f533d54773840373fe853e6796ce92eabd178ef1920b10792c1c3abd9f0b459f3ebb7657525e2b08837aaa48cbfa32b83fc9fd85abd2eda1b657aa542be3a5a8d5092acd970d55e37a677220fc996b4ad3004026477bcd", 0xa7}], 0x3, &(0x7f00000023c0)=[@mark={{0x14, 0x1, 0x24, 0xff}}], 0x18}}, {{&(0x7f0000002400)=@isdn={0x22, 0x9, 0x8, 0x4}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002480)="c6608d78332299f59e75019c8c119f800c453bb354a49ca19a78bec34816255486f23bc74e1847d1f016a3abb250b925030830e320db7cb34007", 0x3a}, {&(0x7f00000024c0)="145bd26aef542d49e854ca4bb77ed4f72c2f8b0a79d04519110e8beacbee76c847aaa4cc1bb9444da1224eb814a26aac283a45a3f9b5c5e3ab7e0117dbcf8abf87c442ea9064d5037708b4f87a258c34d0a95e87e4be49561d1e623413b3d4c807393e25d2a790abf0bc6283f10148013dc598d0d534514dc1404b9de4c68efb2b09e13b276ca72e109395edde272fbe7f97cbca77827b727e5836ddfb33d5b8a839b040c1fc7a2b2e0a5b063fda56cfbef4804bfabfe66d39d9d456a4539f77621a978de8ea", 0xc6}, {&(0x7f00000025c0)="a47efcd8435b743d30544b43c009bee5ea9889b58a0abf005c46caeca3e2b20d0f33a041c195", 0x26}, {&(0x7f0000002600)="a92ce5738d9f66b60616ea0b5da7106b61abd23fc7f21edeabd72fa9928b65b1ed7c1f0811dbc879831eb047a8943e13757d5fa538bca5655a1b5e6f747899cd07373c485c4390c11769ae98187a9ae12e0d12d651ca140cd8223c5cffe94b5007e0c5a10ccab5c35744831f83cb8e043b00731a067829aff64b", 0x7a}, {&(0x7f0000002680)="23666d6ce8b41e82ed521d599b22b33c17a2755ae621ff901e1604d9be0763f2cb034f0c229f99c356c5bcde727497b53e8b943335a1d54771a553a0aa62fea7d43de7a1470f53e73843bdfced114f5483ecf9b21f563f5e2429b03127b4cf5b22f20c6363871aa376ee232a", 0x6c}, {&(0x7f0000002700)="e411cce7847f2ee869dfc80fb830970b6e8527737c436458edb5b24e367b1b0f6edab680688e7e7b4a6c697694b61ff7e8feb7942f29a5d74a212da98bede33a2d97829f784d09973b3474bd17f91f4dd4ba33bf20bab812fadc584700d3d921b78b9eed54f9720396758a61b22d0c594b6834bfe5373df6f72c47c84de0c1be2214451dbaf735f3ebf41f7f0f0fc25717affa190eb4d0b8341887b59ac139dbd5b4cd0a3a87a1f86c240fa0d66d3e8d5f6451e719539be6e33b9c181cb48d9123798f453a9c", 0xc6}, {&(0x7f0000002800)}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000002840)="b6f5a55023c423ed80ab027ad75bca71c12d994a1dc7b7a505fa99450c055ca8305bd53abf2543a4", 0x28}], 0x9, &(0x7f0000002940)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3eb7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000029c0)="b67f253778db4cc888552970de4c98c1ee18f7e50be926f32bf7203ced83124e32f096bcc4d1932de5ab6953643bbe380059aae4f950758497a2bd9c7e7b0702dc033e13f463e2a5dea5c00092b663e3404784469c5366f5f308c923375cb9d22ad6b3a794d729e03f26121925b74ab49fc0aba713d1c0eb8de0c72d7f274ee198242e66ff98a6d9fb1ccb57714e6634681ab00d2720bcf6dc5d365fc3a6444022c9963f88cdafb6bd413cd1020b3129dd4ad47ae0df0a22ca78f2a3d9b9d57929be95bbf1f6ae9ad80086752536fc194d534ca5711b4148e56a51205f81484c97fe4a09", 0xe4}, {&(0x7f0000002ac0)="2d77b486774cc261524c9c6fb6e14e6c5c9d7c92172d249190036e15f4f80b94a514f9413e89f0a0f258ae71ca6f414936f6b7c05cfd8b601029b7028f2622623312fed076e3f00fe80fc75b68ff95e714a0563fe1a38e12469bddc9baacc457391fb76c214e68038f073c52bc5025c14d254eeec8a2f750b04c9a16787f2b7b703293925ecea27ebfc0b9e6cfe24dfcb8bf383e94f08ddd67324598a55d97eb7b54a642f6ce9dd95d7f1cdbb29b7422edc2a7f7145d1025f77933cdedf57ac1da1fb3cb8c42b2ca5f5065a4f2af74e7692f36fb7d160bdd78264cb6d8e7cb95bcfe59454b335ae4", 0xe8}, {&(0x7f0000002bc0)="b6df8a92a92eb671e9ba2b578b76148986fb180afb91a007ccabc6f8732abbfa5774f2b3c155398f46375e", 0x2b}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000002c00)="26f267bf11945ea77facfae362e25526f17ef208955c06b81a8a84119481828d9aa27d140a0adcbe46fafa83c8aede5cea769135f4ca6231da998deafc0ea2fc315839e91a5fbcee9f45eea795b4b43258bcea41c11778a5e2ed552334b27dd60756e632d8c1cc28e464880672541a0042276a92ab4fda4555ad455bc6b66200ec44c64a6973a742ceb53eeb48cb40025283e58b7ae0ce06ae68ac41669f3634b3a4c5d2d38141081ebe487d701bbd549da9cae9b51b4f5e22758bc5a6361caa79532928fe974ca89fab8c50849711f7e695aa3d5707905671bc0833", 0xdc}, {&(0x7f0000002d00)="316577aabcef3d9a385676757e89e1fcba5f5016c1e8afe19c6b7632e2fe15d5ef78cb8b79882f1b4c78f30b29dd1d0bd1a865f4a0e8f94d60d10d03f57b849622bfbe04baeee0c4c7971ff3a2f05765f9", 0x51}, {&(0x7f0000002d80)="98a0a143975adbe02e0049017c69247ec5b1e0fa34a04c1b1c4b62c787edd539c3dd5f99aa00f7ddfdfe6352fae3ea55d1817f1749854f8969421570e108d40a6ad1080058d5cdfd1e9a4877ebf6d8efa70e4d6f128d55308f8e6db5669d450a266d21d5aa1ddb3fe6c961fc8870e0f3a22ec2bd44ac685c928d95c950a2b0a45907feadb57ff6aa261ffe5b5fe836df80daa7eb23a48ea84fe2d8", 0x9b}, {&(0x7f0000002e40)="27d243da3d584c2fb326681a3effec7c27ebfd2a5cc33956e515e1adba5af2b886225fd9c403dd8a910a088681bad9f859003a1f5bad33684fdb65c442c6478922ad9958cee6039b285ab3435230f199af91edc9206f193246aef5c934cefdfa9ca693f32ae53178675863913a33a61e9f454b066cd6931a5148261072c3e26d1800a7d5c36000abba21b6fdea3fed7a55944b583b071857fada40df54894379d6f2eb2d87", 0xa5}], 0x8, &(0x7f0000002f80)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2dd}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)="8b91", 0x2}], 0x1, &(0x7f0000005180)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x91}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x5014}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}}], 0x8, 0x11)

08:45:28 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7a", 0x7)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:28 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:45:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880), 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:28 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7a", 0x7)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:28 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:28 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7a", 0x7)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:35 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:35 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:35 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='~et/snmp6\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r1=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x7, 0x7, 0x8, 'syz1\x00', 0xbe}, 0x3, 0x2, 0x8000, r1, 0x6, 0x6c0, 'syz1\x00', &(0x7f0000000180)=['/dev/udmabuf\x00', '~et/snmp6\x00', '~et/snmp6\x00', '\x00', '/dev/udmabuf\x00', '/dev/udmabuf\x00'], 0x3c, [], [0x6167, 0x2, 0x5, 0x8]})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2)
utimensat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x77359400}}, 0x100)

08:45:35 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880), 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:35 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:35 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}, 0xffffffffffffffff}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:45:35 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880), 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:35 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, 0x0, 0x0)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:41 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:41 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x880, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0xa8, &(0x7f0000000140)=""/168})
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:45:41 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, 0x0, 0x0)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:41 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:41 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, 0x0, 0x0)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000280)=0xe8)
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=<r3=>0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xff, 0x0, 0x3, 0x4, 0x0, 0xd9e, 0x28000, 0x2, 0x7, 0x2, 0x3, 0x81, 0xfff, 0x401, 0x1, 0x3ff, 0x8, 0x80, 0x200, 0x1, 0xffffffff80000000, 0xffffffff, 0x5, 0x3, 0x1, 0x0, 0xd877, 0x3ff, 0xfffffffffffff4f4, 0x800, 0x6, 0x101, 0xffffffffffffffca, 0xffffffffffffffff, 0x3, 0x8000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x1440, 0x3, 0x7, 0x4, 0x3, 0x1, 0x39b2}, r3, 0x10, r1, 0x3)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0))

08:45:41 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:41 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:42 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40200, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:45:42 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:50 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:50 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x80000)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
syncfs(r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4dc18c8ef5e96e99, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x88c0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)=@random={'user.', 'vmnet0#\'wlan0\x00'}, &(0x7f0000000300)=""/8, 0x8)
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)

08:45:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:50 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0xa3c)

08:45:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:51 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:51 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:51 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:45:59 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:45:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
accept$alg(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa3c)

08:45:59 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:59 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=']\x00', 0xffffffffffffffff}, 0x30)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000100)='sesst\v\x00\x00d\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:45:59 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
accept$alg(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa3c)

08:45:59 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f00000006c0)='/dev/swradio#\x00', 0x0, 0x2)
recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0xffffffffffffff3a, 0x0, 0x0, 0x0, 0x3a9}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000700)={'broute\x00'}, &(0x7f0000000680)=0x78)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="e5085837864c8cfe636d3c57b28332d7b52566d2bef0dc826420026e4270fdbae32cf79f30c779f93e0c0d7009e1ef0fd7c7be736b3f62eeebc644434151d9ba01d88ad1974ab2a2dbca556f0788b3f99ce0100f532af7489123b69141777903d4c780531bec4e5578bb886ee1e434de6dbf", 0x72}, {&(0x7f0000000140)="e817fc78771fde0e5af092d96be3a94ef76b", 0x12}, {&(0x7f0000000180)="743bf1b13b4c5928787af91c252cea5e92f5bbc969c74060f3041a24cf9665a99e9706c625b1306f1eb67e0a3b3c0920548be6ea1ed9f4d9f3ae530780e1437558ff758755ba29feac9d6f8b4dcbf8adbb33e4b14ae6c3cba62286ab940d00bebfae851f95aac63a28c61e1f57924861fc85edd608a0b07ab2d8ecae15c0b3353560a8137bdd2861a474b81fd15a4f7d81d2ecbc1cd62c8a162dbbd42f1a647790ef39f78d892bafad328d42b7a75f4a0adec6b888a1a5cceccdd3c8fa724dfe", 0xc0}, {&(0x7f0000000280)="4910900d3f093f7839ed822a73aebacd8d844eccfb2d1a43c40a0b99dc9ef0e5d01b1a527c19b9ceaa0564d59c65f5f396ae37ca2fc6ea9978b25a1c4f6697ff4927524f56cf810aaee0ecf5e09cf2a8dc64449b3788533fbb541d7779d9111fe4479cfed20ce4c4a83327d3720ab71a0740d27998fb8a4a20176a045dba18a54aace077fabf9da43a9838e97e4a5fb3abef97ce1ed0bd6e83b822cdb2fa73361b16eb5c", 0xa4}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000180000000000000017010000040000000000000000000000180000000000000017010000030000000100000000000000b80000000000000017010000020000009f0000005c0580a660af06bc802443e3b001b6a8dd1f788b2a281f06cfacf86e6d582b632f6ce1dd03e26c25ae3beea0b31bf6efa9b7a317789ae31b5a73c4285f6d727b3f001a29dd3cf0fc3a8db79fda6a04994353bcf5986576908c043851ef66cb613eff64397433cdeb0a20466f2c9c4be060e38afe47491b4a8047a44371e30d6fd7e2a685fe89a3312afb679d206093cbbc51bbb74a4f0000000000700000000000000017010000020000005b000000d50124ab47db7e3703e5412d0b1a8899e71b647f2527d012feace35be1ec9b4ee6ae924b560d73611c8fe1243bc87295dd854b5ba30d940f6542f85eb93b10eef849bf4698c9d993afa3815fa8b53d9fe2574c4fb026d51efc84b100f8000000000000001701000002000000e1000000f9e3840a0d6f170c2be8aa1fc5f0dbca897adf747f535d59c30106865808002b3033d9a18ad7c68e911d78f11c298b10157a52a5a9a905f2d04349ef5e72ca7b0e3e626a51a161023ab2050d8a5bf3605148a0cba39015dcaa4f4e6bd40fcaacadbe30e5573dd92faf5e5e87ce7138b81d5bd591c38a6189bf393aaae7bd8c85d7ee6cb5aef47ca88c38ee038e7cc1d32760844c52eb5776fa246eb49c7aa337f1f968106734199f9fb93f7b2f66041d32ffaaa2fc51c68ba088429dc2df1df1eaa4b43998ff7ff3d2d577d4494850d5834986b1de5935ef8625bb38df47bb3a120000001800000000000000170100000300"/664], 0x298, 0x804}, 0x8000)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:45:59 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:59 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:45:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
accept$alg(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa3c)

08:45:59 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:06 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:06 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:46:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa3c)

08:46:06 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {0x0}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:06 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:06 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0)

08:46:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa3c)

08:46:06 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {0x0}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa3c)

08:46:06 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='n\xe5t/unix\x00\xae\xda\xed\xc6\xdd\xac5<{\x06\xe5P\x91\x0f\xd6\x1cQaMq\x01\xf7\x01\xd3A\x89a\x88C\xe7\x91\x04\xb1\xc3I\x1e\xa0\x14\xe6\x8a\xad\xef\x01v\xde\xc4\xa6\xa3\xd7\n.\xe1\xfb\xc8C\x1c\x978\x1e\xd6\xca=\xd1\xab\xe6\xf8o9\x0e\xbf~\xd5u\xa3\xfb\x83\xb3\xc8\xb9;v\x19\xe8\xb7V\xb7(\xb7*\xcf\x85:\x82\x8b`\xeb\xed\xc3\xdc\x99s\xee\xa5\x12\x16\xc2\x12\x06\x03\x81\xa8j\r1\xb3\xa5s:\xcc\xbe\xeevV?\xc8$\x18\x0e\x87\x12\xf1T')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0xdb, 0x58, 0x1, 0xfffffffffffffffc, 0x8, 0x400, 0x1, 0x28e, 0x5, 0x1, 0x100000000, 0x9})
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000001c0)=""/4096)

08:46:06 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:16 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:16 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:16 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x40, 0x6, 0x7})
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:46:16 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x0)

08:46:16 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {0x0}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:16 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:16 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x0)

08:46:16 executing program 4:
r0 = dup(0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000280), 0x1000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000000c0)={{0x0, 0x4, 0x5, 0x3, 0x28c000000000}, 0x100000001, 0x1f, 0x7})
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:46:16 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00')
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8)
read(r1, &(0x7f0000000040)=""/117, 0x369)
r2 = accept$alg(r0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x0)

08:46:17 executing program 2:
syz_open_dev$evdev(0x0, 0x0, 0x0)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unlink(0x0)
socket$rxrpc(0x21, 0x2, 0x0)
getgid()
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
unshare(0x40000000)

08:46:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1829.322403][T23050] IPVS: ftp: loaded support on port[0] = 21
[ 1829.400213][T23057] IPVS: ftp: loaded support on port[0] = 21
08:46:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:23 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/199, 0xc7}, {&(0x7f0000001500)=""/233, 0xe9}], 0x4, 0x0)

08:46:23 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000080)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f)

08:46:23 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:24 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={<r1=>0x0, 0xf9, "6bbeaec44a76c459c13fb6bbc4acdd5e66508bb84f174dda9c25491e33e615956f6ff8cbae2d764a5f9b053e20500aa4c5732e3e8f9c85eb045154e0fca94c2cc9f121d4bbed1680ca485747778410c88c9f2d00319f92e2e1e43b78ee2476275c320093013f493c43a7429b4bd380082ba1cdbcf54d42b1632f2db6b15acf49d181980357453c639bd59f8cdca5c66f374876d8d4a705bb449054833baf4ef2ac89a4395ee83ede12fe18ee54caf190371256890d9a7ba71d84e6b3f62898412fcd600c8ddf8902c6fae5cfcbe55905d799c05b03c80df9d04bc318e7549c34ce2f3246075a721945faf34c57da14937da74e312f92d43f66"}, &(0x7f0000000480)=0x101)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000004c0)={<r2=>0x0, 0x3ff}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={<r3=>0x0, 0x5f, "c198c405d2bffde9b514cdd0a76b18a4df030d396513b908c2933ee7019e9d17981aec07e9ad636acb2b8be7aa8ec6b79135c81f473acf5a7c760116c2e3951e2e43a74f7f2a3d3ecc224e7140e8abd2edb61c7e04d75ffe360b640b835b09"}, &(0x7f00000005c0)=0x67)
sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ba259cb5ac45da966dd0f7792f70228e08a64e862ec70a1820089a3d00932e35164927f795ddcd7a6f9fe603720518a8a55152b03848bf029ae0c4bb59a3b4c71a387587d63e33218014528b2311", 0x4e}, {&(0x7f0000000200)="ef17a1be82f9ea1dd2ce40d37483d9e5d6cb9d2b594818abe5d356bcd9fbd01273277be3ffd678a65277eba85c7bfe21119dfe655823fd3648a3c0ff6a24358d8d7c9d080cc646f86dd86a5ce2edac040487673ee5d6feaa99c15ee390eff0d541113fede7517dc8f3e7595629a365569a84bb492cdfd48b565a1c2469330671d910259a42382b162bc2fa35026bdfe5652ba2b1f7a33e2fae6a3d33920e74e9003f4ffb8c38ff77eee24e43636d14d5c26b1b910a8a0663027b9aa4e619cf4175cb4fc8f9cbec900c0346380de9c45d71303edd5135d2da0dca3f89cd6e904399fb26fa700d40", 0xe7}], 0x2, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0xa05, 0x200, 0xffffffffffffffc0, 0x101, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x6, 0x0, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xbb57, 0x1, 0x1, 0xffffffff, r3}}], 0x78, 0x4800}, 0x80)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r4, &(0x7f00000017c0), 0x1be, 0x0)

08:46:24 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a0007000800005d14a4071fe438883c5521d1", 0x39}], 0x1)

[ 1836.296305][T23083] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[ 1836.310270][T23083] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1836.320272][T23083] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
08:46:24 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:24 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:24 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x3, 0x8001}], 0x1)
semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2)

08:46:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f00000004c0)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

08:46:34 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4)
socket$isdn(0x22, 0x3, 0x23)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={<r1=>0x0, 0x5}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x5ef0}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x5, 0x3})

08:46:34 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {0x0}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x75b, 0x4414476200000000, 0xef, 0x80000001}, 0xcd4d)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
getsockopt$netlink(r1, 0x10e, 0x11, &(0x7f00000001c0)=""/88, &(0x7f0000000180)=0x58)

08:46:34 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x80800)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:46:34 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {0x0}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:34 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@ipx, 0x7, 0x0}, 0x40}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:46:40 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {0x0}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:40 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f00000000c0))

08:46:40 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:40 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:40 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x15\xf4\xff\xebY\x00\x00\x00\x00\x00\xe2\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00\x00\xaf\x7f\xbc\x04\x00'})

08:46:40 executing program 2:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0411"], 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

08:46:40 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x3, 0x8)
clock_getres(0x7, &(0x7f00000001c0))

[ 1852.924784][   T26] audit: type=1804 audit(1564303600.742:46): pid=23173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir245906327/syzkaller.ILxfsW/699/file0" dev="sda1" ino=16625 res=1
08:46:40 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:40 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000600)='/dev/video#\x00', 0x8, 0x509c40)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x1})
accept(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000480)=0x80)
recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f00000004c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xff8c}, 0x767}], 0x40000000000021a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r2 = msgget(0x2, 0x40)
msgsnd(r2, &(0x7f0000000340)={0x3, "fccd07eb1b011b9b3ef3c864e7e90cfd19f98159bae22f2898831844a0735ea2d45877667fd60c7cf97b09b4aa0beb980733c5a0fc8d60ccc850382820edd7d998d7e89401fc446c4cae14c72c3bfc21f5755f97f108ff2db78f227db8d41f064836f66de3768c1e7e51f31f8eb364d7ccc090625c031c6d9e3650dff1ea24030a8aabd76686db6066d5f0e3e9b09150e7c1973225aa37095203e8591347e8121520e5e4f523a27bc1d8a53a7fac34420d5f5060"}, 0xbc, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000540)=""/155, 0x9b}], 0x3, 0xfffffffffffffffe)

08:46:40 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
preadv(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/235, 0xeb}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xfffffffffffffeba}, {&(0x7f00000013c0)=""/118, 0x76}, {&(0x7f0000001440)=""/117, 0xe}], 0x10000116, 0xfffffffffffffffd)

08:46:40 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1853.066567][T23173] ima: Can not allocate sm3-256 (reason: -2)
[ 1853.074211][   T26] audit: type=1800 audit(1564303600.892:47): pid=23173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16625 res=0
08:46:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/92, &(0x7f0000000140)=0x5c)

[ 1853.168913][   T26] audit: type=1804 audit(1564303600.902:48): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir245906327/syzkaller.ILxfsW/699/file0" dev="sda1" ino=16625 res=1
[ 1853.179581][T23189] ima: Can not allocate sm3-256 (reason: -2)
[ 1853.233669][   T26] audit: type=1800 audit(1564303601.052:49): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16625 res=0
08:46:47 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:47 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:47 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:47 executing program 2:

08:46:47 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={<r1=>0x0, 0x80, 0x5, [0x3, 0x5, 0x1, 0x2b, 0xfffffffffffffff9]}, &(0x7f0000000100)=0x12)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0x1000, "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"}, &(0x7f0000000140)=0x1008)
syz_extract_tcp_res(&(0x7f0000000180), 0x8, 0x3)

08:46:47 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:47 executing program 2:

08:46:48 executing program 4:
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x200000007ff, 0x400080001)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0x9)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2)
preadv(r1, &(0x7f00000017c0), 0x0, 0x0)

08:46:48 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:48 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:48 executing program 2:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
r1 = dup(r0)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4014})
ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={0x0})

08:46:48 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1860.376380][T23244] ptrace attach of "/root/syz-executor.2"[10301] was attempted by "/root/syz-executor.2"[23244]
[ 1860.489403][T23252] ptrace attach of "/root/syz-executor.2"[10301] was attempted by "/root/syz-executor.2"[23252]
08:46:57 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x0, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:46:57 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
io_uring_setup(0xa49, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3bf})
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000340)={0xcb, 0x1, 'client1\x00', 0x2, "40bbc77727334909", "6cac454221a98c9d8df5bf11420b1b37974876ec945fa34ed012b10866e2e9da", 0x9, 0x8})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000600)=0xe8)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000480)={0x0, 0x100000})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000000c0)={0x7f, 0x1, 0x7fffffff})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000400)})
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={<r1=>0x0, @in6={{0xa, 0x4e24, 0xd3, @loopback, 0x9}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x9, 0xf3, 0x8001}, &(0x7f0000000280)=0xfffffffffffffe65)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000004c0))

08:46:57 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

08:46:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {0x0}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {0x0}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 4:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x100020)

08:46:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:46:57 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0xfdfffffffffffffc, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000001c0))

[ 1870.164068][T23272] device nr0
 entered promiscuous mode
[ 1870.365624][T23277] device nr0
 entered promiscuous mode
08:47:04 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x0, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {0x0}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x80)
recvfrom$unix(r0, &(0x7f0000000380)=""/1, 0x1, 0x20, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x8, <r3=>0x0, 0x10001, 0x7f})
fsetxattr$security_capability(r2, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x5, 0x8}]}, 0xc, 0x1)
ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000180)={r3, 0xbb6e})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x14200, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'syzkaller0\x00', @local})
syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x3e6, 0x101000)
preadv(r1, &(0x7f00000017c0), 0x1be, 0x0)

08:47:04 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

08:47:04 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

08:47:04 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:04 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$ax25(r0, &(0x7f0000000140)={{0x3, @null}, [@rose, @netrom, @netrom, @null, @default, @bcast, @netrom]}, &(0x7f00000001c0)=0x48, 0x80800)
preadv(r1, &(0x7f00000017c0), 0x0, 0x40000000000000)

08:47:05 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgid(0xffffffffffffffff)
move_pages(r1, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000100)=[0x5, 0x1f], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

[ 1877.409883][T23319] device nr0
 entered promiscuous mode
08:47:11 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x0, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:11 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:11 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:11 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

08:47:11 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

08:47:11 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:11 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {0x0}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1884.583544][T23365] device nr0
 entered promiscuous mode
[ 1884.707190][T23377] device nr0
 entered promiscuous mode
08:47:18 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x0)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:18 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:18 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {0x0}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x107000, 0x0)

08:47:18 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

08:47:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

08:47:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:18 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:19 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {0x0}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1891.194517][   T26] audit: type=1800 audit(1564303639.012:50): pid=23431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16784 res=0
08:47:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

[ 1891.359854][T23430] device nr0
 entered promiscuous mode
08:47:19 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x0)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:23 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:23 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:47:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:23 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:47:24 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1896.284753][T23471] device nr0
 entered promiscuous mode
08:47:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:24 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:24 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
openat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)

08:47:24 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:24 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1896.982217][T23493] device nr0
 entered promiscuous mode
08:47:30 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x0)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:30 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {0x0}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

08:47:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:47:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {0x0}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {0x0}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1902.817456][T23520] device nr0
 entered promiscuous mode
08:47:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:30 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:36 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

08:47:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x40)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

08:47:36 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x40)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1908.866559][T23569] device nr0
 entered promiscuous mode
08:47:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:36 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)
unlink(&(0x7f00000019c0)='./file0\x00')

08:47:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:37 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x40)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1909.545102][T23593] device nr0
 entered promiscuous mode
08:47:43 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {0x0}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x0, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:43 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)

08:47:43 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x19f, 0x10000000)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x80fffffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20000000000002c, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2000000000f, &(0x7f0000000180)=0x8000006, 0xffffffffffffffde)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)

08:47:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {0x0}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1915.896524][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1915.902337][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:47:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x0, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1916.103053][T23618] device nr0
 entered promiscuous mode
[ 1916.227657][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1916.234406][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:47:44 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x66}, {0x0}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:44 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(0xffffffffffffffff)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:44 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335)

08:47:44 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x0, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1916.696478][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1916.702319][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1916.809993][T23641] device nr0
 entered promiscuous mode
08:47:49 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:49 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(0xffffffffffffffff)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:49 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x19f, 0x10000000)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x80fffffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20000000000002c, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2000000000f, &(0x7f0000000180)=0x8000006, 0xffffffffffffffde)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)

08:47:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:49 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:47:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(0xffffffffffffffff)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1922.249917][T23663] device nr0
 entered promiscuous mode
08:47:50 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:50 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 1922.456792][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1922.463042][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:47:50 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:56 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x0, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:47:56 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:56 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x19f, 0x10000000)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x80fffffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20000000000002c, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2000000000f, &(0x7f0000000180)=0x8000006, 0xffffffffffffffde)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)

08:47:56 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:56 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:47:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:57 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:57 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 1929.497278][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1929.503678][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:47:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:47:57 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1929.817019][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1929.823320][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:48:05 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x0, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:05 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:05 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:05 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:05 executing program 4:
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$inet(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x19f, 0x10000000)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x80fffffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20000000000002c, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2000000000f, &(0x7f0000000180)=0x8000006, 0xffffffffffffffde)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)
getpid()
sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)

08:48:05 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:05 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1937.816486][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1937.822298][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:48:05 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:05 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:05 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:06 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1938.136476][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1938.142315][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:48:12 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x0, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x7}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:12 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x20400000000003, 0x10000000000004)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd856fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc8823079881", 0x4c}], 0x1}, 0x0)

08:48:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x20400000000003, 0x10000000000004)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd856fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc8823079881", 0x4c}], 0x1}, 0x0)

08:48:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:12 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:12 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:13 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0x211d49, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0271069b869c070000000086dd60b409000030000002000000000000000000feffe0000002ff020000000000000000000000000001890090780009290060b680fa0000000000000000000000000103ffffffffffff00000000000000000000ffffac14ffbb"], 0x0)

08:48:13 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1945.478437][T23836] device nr0
 entered promiscuous mode
08:48:21 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:21 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000080)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x38, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x18)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000)
sendfile(r0, r1, 0x0, 0x1ffe03)

08:48:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:21 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:22 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:22 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1954.322812][T23860] device nr0
 entered promiscuous mode
08:48:22 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
sendmsg$kcm(r1, 0x0, 0x90)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000080)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x38, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x18)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000)
sendfile(r0, r1, 0x0, 0x1ffe03)

08:48:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1955.133836][T23876] device nr0
 entered promiscuous mode
08:48:29 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @pix_mp={0x0, 0x0, 0x32315559}})

08:48:29 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4008804)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x20400000000003, 0x10000000000004)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd856fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc8823079881", 0x4c}], 0x1}, 0x0)

08:48:29 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 4:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
getpid()
syz_open_dev$sndctrl(0x0, 0x0, 0x480006)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000140)='./file0\x00')
socket$rxrpc(0x21, 0x2, 0x0)
getgid()
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
unshare(0x40000000)

[ 1961.482899][T23902] device nr0
 entered promiscuous mode
08:48:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:29 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 1961.733246][T23922] IPVS: ftp: loaded support on port[0] = 21
[ 1962.013632][T23928] device nr0
 entered promiscuous mode
[ 1962.068101][T23933] IPVS: ftp: loaded support on port[0] = 21
08:48:36 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:36 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:48:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(0xffffffffffffffff)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x0, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1968.706813][T23954] device nr0
 entered promiscuous mode
08:48:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x0, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:36 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:36 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(0xffffffffffffffff)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1969.312239][T23979] device nr0
 entered promiscuous mode
08:48:43 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100))
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x0, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(0xffffffffffffffff)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:48:43 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x0, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1975.882520][T24004] device nr0
 entered promiscuous mode
08:48:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:43 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:44 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1976.518230][T24029] device nr0
 entered promiscuous mode
08:48:49 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100))
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:49 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x0, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:49 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:48:49 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:49 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:49 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x0, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:50 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:50 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:50 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1982.727130][T24045] device nr0
 entered promiscuous mode
08:48:55 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100))
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:48:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:55 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:55 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:48:55 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d3, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)

08:48:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 1988.310843][T24098] device nr0
 entered promiscuous mode
08:48:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:56 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:48:56 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:48:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(tgr192,xts(twofish))\x00'}, 0x58)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)

[ 1989.151944][T24132] device nr0
 entered promiscuous mode
08:49:03 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488d")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:03 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319f", 0x8)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/102, 0x59}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/78, 0x46}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001380)=""/150, 0x96}, {&(0x7f0000001440)=""/213, 0xd5}], 0x8}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:03 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:03 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:03 executing program 0:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r0 = gettid()
syz_open_procfs(r0, &(0x7f0000000000)='auxv\x00')
exit(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

08:49:03 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:03 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:03 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 1995.516283][T24207] device nr0
 entered promiscuous mode
08:49:03 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 1995.914165][T24228] device nr0
 entered promiscuous mode
08:49:09 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:09 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:09 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488d")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:09 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:09 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_IO(r0, 0x2201, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x10e, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0})

08:49:09 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:09 executing program 0:
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fallocate(r0, 0x0, 0x0, 0x2)
fallocate(r0, 0x0, 0x7fff, 0x8001)
fallocate(r0, 0x0, 0x5e89, 0xfff3)

08:49:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:09 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:09 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r0}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:09 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:09 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2001.970444][T24245] device nr0
 entered promiscuous mode
08:49:15 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488d")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:15 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300e31700b800000006e0b700"], 0x14}}, 0x0)

08:49:15 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:15 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:15 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:15 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:15 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:15 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:16 executing program 0:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB], 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

[ 2008.237401][T24300] device nr0
 entered promiscuous mode
[ 2008.300051][   T26] audit: type=1804 audit(1564303756.122:51): pid=24314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir014691570/syzkaller.jRmseg/514/file0" dev="sda1" ino=16993 res=1
08:49:16 executing program 0:
semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1)
semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)

08:49:16 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2008.341940][   T26] audit: type=1804 audit(1564303756.152:52): pid=24315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir014691570/syzkaller.jRmseg/514/file0" dev="sda1" ino=16993 res=1
08:49:16 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2008.831678][T24328] device nr0
 entered promiscuous mode
08:49:22 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d76")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:22 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="24000000020707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01c", 0x365}], 0x1}, 0x0)

08:49:22 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:22 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2015.138158][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
08:49:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(tgr192,xts(twofish))\x00'}, 0x58)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)

08:49:23 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:23 executing program 0:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
unlink(&(0x7f0000000440)='./bus\x00')
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)

[ 2015.440808][T24347] device nr0
 entered promiscuous mode
08:49:23 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:23 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2015.639751][T24361] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[ 2015.667207][T24361] FAT-fs (loop0): Filesystem has been set read-only
[ 2015.702991][T24367] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
08:49:23 executing program 0:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
unlink(&(0x7f0000000440)='./bus\x00')
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)

[ 2016.000931][T24374] device nr0
 entered promiscuous mode
[ 2016.075507][T24382] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[ 2016.097662][T24382] FAT-fs (loop0): Filesystem has been set read-only
08:49:30 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d76")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:30 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:30 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:30 executing program 0:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
unlink(&(0x7f0000000440)='./bus\x00')
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)

08:49:30 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:30 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:30 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x62)

[ 2022.630170][T24407] device nr0
 entered promiscuous mode
08:49:30 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:30 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x40000000006, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ftruncate(r0, 0x0)

08:49:30 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000006c0)="101f82d05addd838df72a9b26f46677c4af9663463b56f2db527bf3b87605519df38b69d7952c4f66ebbe0bb3daca94ed76b24e2f1303949fab90f13da78840243ade3649438c608ff8677144e98045a2a4195c28286161642301278884e525a12ffa45364d7a47b99f70cc0d83bb6b26e7432f77a2a384f5ec6c4ea9064c212ce3126d13e27fd30b2dc36258d6ecf0b08589406b53cb4627ab67d27254c9e21a8d0a351002183a4ed3f43ccdde4047460a5adff2fa65007231a546490aa528cbff7543f"}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2023.031013][T24435] device nr0
 entered promiscuous mode
08:49:36 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d76")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:36 executing program 3:
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:36 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:36 executing program 0:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:36 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:36 executing program 3:
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:36 executing program 3:
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:36 executing program 3:
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:36 executing program 4:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:37 executing program 3:
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2029.420948][T24448] device nr0
 entered promiscuous mode
08:49:43 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d7660")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:43 executing program 3:
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:43 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:43 executing program 0:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:43 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:43 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2036.159279][T24493] device nr0
 entered promiscuous mode
08:49:44 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:44 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:44 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:49 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:49 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:49 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
close(r0)
getsockname(r2, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:49 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d7660")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:49 executing program 0:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:50 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2042.230612][T24533] device nr0
 entered promiscuous mode
08:49:50 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:50 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:50 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2042.827650][T24545] device nr0
 entered promiscuous mode
08:49:50 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:50 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2043.290692][T24565] device nr0
 entered promiscuous mode
08:49:57 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d7660")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:49:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:49:57 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c00020008000a0000000000"], 0x3c}}, 0x0)

08:49:57 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:49:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2049.429621][T24584] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
08:49:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000080)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310040", 0x1f)

08:49:57 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:57 executing program 0:
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x10000)
syz_open_dev$usbmon(0x0, 0x0, 0x208080)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

08:49:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
close(r0)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:49:57 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2050.139178][T24583] device nr0
 entered promiscuous mode
08:50:04 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:04 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:04 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:04 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:04 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x8, 0x2000001, 0x0, 0x0, 0x0)

08:50:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(0xffffffffffffffff)
getsockname(r3, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f000037d000)=[{&(0x7f0000000000)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101})
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x100000000009e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00\x03\xb1\x00\x00\x00\x00`\x00\xdd\x00\x00\x04\x00'})

[ 2056.689076][T24627] device nr0
 entered promiscuous mode
08:50:04 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2056.793346][T24638] device lo entered promiscuous mode
[ 2056.806127][T24638] device lo left promiscuous mode
08:50:04 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2056.868305][T24638] device lo entered promiscuous mode
08:50:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:04 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2057.103089][T24645] device nr0
 entered promiscuous mode
08:50:10 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:10 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:10 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c)

08:50:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:10 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:10 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2062.905354][T24664] device nr0
 entered promiscuous mode
08:50:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:10 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:10 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:11 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2063.411252][T24685] device nr0
 entered promiscuous mode
08:50:17 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:17 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[], 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:17 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:17 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2070.071857][T24708] device nr0
 entered promiscuous mode
08:50:18 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001640))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:18 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2070.455961][T24720] device nr0
 entered promiscuous mode
08:50:26 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x8)
r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x1)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380)=<r7=>0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0))
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r2, r8, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r12 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:26 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:26 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:26 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:26 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2078.365670][T24744] device nr0
 entered promiscuous mode
08:50:26 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:26 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:26 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2078.802775][T24763] device nr0
 entered promiscuous mode
08:50:33 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x8)
r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x1)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380)=<r7=>0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0))
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r2, r8, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r12 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:33 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:33 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:33 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:33 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2085.663047][T24790] device nr0
 entered promiscuous mode
08:50:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:33 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2085.748956][T24791] device nr0
 entered promiscuous mode
08:50:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:33 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

[ 2086.157954][T24817] device nr0
 entered promiscuous mode
08:50:40 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:40 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:40 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0xed, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:40 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x8)
r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x1)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000380)=<r7=>0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0))
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r2, r8, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r10, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r12 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:40 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2092.743682][T24826] device nr0
 entered promiscuous mode
08:50:40 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:40 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:41 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:41 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2093.202272][T24836] device nr0
 entered promiscuous mode
08:50:46 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0x0, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:46 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:46 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:46 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:46 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:46 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:46 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2099.082818][T24869] device nr0
 entered promiscuous mode
08:50:47 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2099.368759][T24883] device nr0
 entered promiscuous mode
08:50:55 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0x0, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:50:55 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:55 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:55 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8bf390239054af9caf1a3f5b0", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:50:55 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xd)
write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0}, 0xa0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2107.540648][T24916] device nr0
 entered promiscuous mode
08:50:55 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:50:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:50:55 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getown(0xffffffffffffff9c, 0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000000c0))
r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0)
ioctl(r0, 0x6681, 0x0)

08:51:02 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0x0, 0x3, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:51:02 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:02 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:51:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a31d96d5de2361ec735eaefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797e93fc6bbbc58165ebea25878b8a8da2563190b8f32357"], 0x39)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0)

08:51:02 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:02 executing program 3:
setrlimit(0x6, &(0x7f0000000180))
mlockall(0x1)
munlockall()

[ 2114.652517][T24968] device nr0
 entered promiscuous mode
08:51:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:02 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @remote}], 0x5c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:51:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:02 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:11 executing program 1:
syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x4, 0x4000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x311080, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x7, 0x800000007fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xab)
socket$inet6(0xa, 0x2, 0x4b2e)
ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x0, 0x8)
r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000380)=<r8=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0))
r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r10 = dup3(r2, r9, 0x10000)
setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r11, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64]], @ANYRESDEC, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], @ANYRES16=r4], 0x26}}, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0)
sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x2}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x7, 0x89b, &(0x7f0000000580)="f322cb003cfcb5405477a4e2bc696cfd7fa9e15672237a755a9910ac94349ca7842cb9a0a35fc3ea0f95d24477469c123244b222b32873197b18a4cc857af7e087e317bf0634a83931e9d7fb6737e80a34a1b61571f978e8ca1b1e384af0fdf0d1b64749f3832b17489d7a179f3251c1fb8147ba238c12adeaec8ba0a31afcfde05430bbc47efea06642abd90e9cb8b30f0fb2ec6c2e24653989e287fa47a7f21814e445ba2ff00ddbc51778e053d946ca0c7066053e87d287a69c004e9cf1b3447c70", &(0x7f0000000480)="2ea3eae77a54348e1bdf6fa96a39f284f330d48eff6335ce047e78a757a552d7426542f273a80213086fd676354fc9322b406e42c1344d2d75b8a66be1eece54021384eaad0048a8eac5f4b50e592b8a317995aade2312801b3b6c4ff7dfedb27128053f0dbb788f1e518bb72e916383e1a0175f3da73a", 0xc3, 0x77})
r13 = socket$kcm(0x10, 0x10, 0x4)
sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="39000000140081ae00003c0005000187110008abca1b4eff030000ebb37358582bdbb7d553eb6057bad9e220085a0839b4e921556b3d5df500", 0x39}], 0x1}, 0x0)

08:51:11 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:51:11 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001140)=@gcm_256={{0x303}, "7107378967479cf0", "535413bc3981a4c3be2c3b4dd1246b00b500afdc78bef14c208909d3aa127191", "d921be85", "ab97e702aa018d82"}, 0x38)
sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)

08:51:11 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8", 0xc, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2123.833368][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
08:51:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

08:51:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8", 0xc, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

[ 2123.901722][T25006] device nr0
 entered promiscuous mode
08:51:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)="c6ef157d03adc9514c2e41a8", 0xc, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r1}, &(0x7f0000002700)=""/83, 0xfffffffffffffd85, 0x0)

08:51:11 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0xb, 0x81, 0x0, 0x49}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

08:51:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000001700)={'syz_tun\x00', @ifru_map={0x0, 0x7fff, 0x1, 0x7fffffff, 0xfffffffffffffff7}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000001c0))
close(r0)
getsockname(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001640)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001680)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8f8, @ipv4={[], [], @empty}, 0x7}, @in={0x2, 0x4e20}, @in={0x2, 0x0, @remote}], 0x4c)
socket$pppoe(0x18, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93)

[ 2124.103570][T25033] device nr0
 entered promiscuous mode
[ 2268.288650][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [swapper/0:0]
[ 2268.296588][    C0] Modules linked in:
[ 2268.300479][    C0] irq event stamp: 92842
[ 2268.304726][    C0] hardirqs last  enabled at (92841): [<ffffffff8166b5f1>] tick_nohz_idle_exit+0x181/0x2e0
[ 2268.314620][    C0] hardirqs last disabled at (92842): [<ffffffff873e704d>] __schedule+0x1dd/0x15b0
[ 2268.323818][    C0] softirqs last  enabled at (91666): [<ffffffff876006cd>] __do_softirq+0x6cd/0x98c
[ 2268.333192][    C0] softirqs last disabled at (91655): [<ffffffff8145aedb>] irq_exit+0x19b/0x1e0
[ 2268.342902][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc1-next-20190726 #53
[ 2268.351301][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2268.361469][    C0] RIP: 0010:check_memory_region+0x3d/0x1a0
[ 2268.367454][    C0] Code: 55 0f b6 d2 48 39 c7 48 89 e5 41 55 41 54 53 0f 86 07 01 00 00 4c 8d 5c 37 ff 49 89 f8 48 b8 00 00 00 00 00 fc ff df 4d 89 da <49> c1 e8 03 4d 8d 24 00 49 c1 ea 03 49 01 c2 4c 89 e0 49 8d 5a 01
[ 2268.387058][    C0] RSP: 0018:ffff8880ae809b10 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13
[ 2268.395477][    C0] RAX: dffffc0000000000 RBX: ffff888094e441c8 RCX: ffffffff8159a3d7
[ 2268.403447][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888094e441c8
[ 2268.411423][    C0] RBP: ffff8880ae809b28 R08: ffff888094e441c8 R09: ffffed10129c883a
[ 2268.419393][    C0] R10: ffff888094e441cb R11: ffff888094e441cb R12: 0000000000000001
[ 2268.427363][    C0] R13: 0000000000000003 R14: ffffed10129c8839 R15: 0000000000000001
[ 2268.435340][    C0] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 2268.444266][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2268.450847][    C0] CR2: ffffffffff600400 CR3: 0000000066c3b000 CR4: 00000000001406f0
[ 2268.459079][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2268.467587][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 2268.475555][    C0] Call Trace:
[ 2268.478829][    C0]  <IRQ>
[ 2268.481685][    C0]  __kasan_check_read+0x11/0x20
[ 2268.486544][    C0]  native_queued_spin_lock_slowpath+0xb7/0x9f0
[ 2268.492704][    C0]  ? __pv_queued_spin_lock_slowpath+0xd10/0xd10
[ 2268.498956][    C0]  ? mark_held_locks+0xf0/0xf0
[ 2268.503797][    C0]  ? kvm_clock_read+0x18/0x30
[ 2268.508470][    C0]  do_raw_spin_lock+0x20e/0x2e0
[ 2268.513316][    C0]  ? rwlock_bug.part.0+0x90/0x90
[ 2268.518251][    C0]  ? lock_acquire+0x190/0x410
[ 2268.523008][    C0]  ? tcp_write_timer+0x2b/0x1e0
[ 2268.527863][    C0]  _raw_spin_lock+0x37/0x40
[ 2268.532370][    C0]  ? tcp_write_timer+0x2b/0x1e0
[ 2268.537221][    C0]  tcp_write_timer+0x2b/0x1e0
[ 2268.541891][    C0]  call_timer_fn+0x1ac/0x780
[ 2268.546472][    C0]  ? tcp_write_timer_handler+0x8d0/0x8d0
[ 2268.552102][    C0]  ? msleep_interruptible+0x150/0x150
[ 2268.557475][    C0]  ? trace_hardirqs_on+0x5e/0x240
[ 2268.562504][    C0]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2268.567704][    C0]  ? tcp_write_timer_handler+0x8d0/0x8d0
[ 2268.573335][    C0]  run_timer_softirq+0x697/0x17a0
[ 2268.578358][    C0]  ? add_timer+0x930/0x930
[ 2268.582849][    C0]  ? kvm_clock_read+0x18/0x30
[ 2268.587521][    C0]  ? kvm_sched_clock_read+0x9/0x20
[ 2268.592801][    C0]  ? sched_clock+0x2e/0x50
[ 2268.597210][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[ 2268.602058][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2268.608292][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2268.614525][    C0]  __do_softirq+0x262/0x98c
[ 2268.619019][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[ 2268.623875][    C0]  irq_exit+0x19b/0x1e0
[ 2268.628029][    C0]  smp_apic_timer_interrupt+0x1a3/0x610
[ 2268.633577][    C0]  apic_timer_interrupt+0xf/0x20
[ 2268.638499][    C0]  </IRQ>
[ 2268.641431][    C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 2268.646795][    C0] Code: e8 a6 6d fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d f4 9f 48 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 9f 48 00 fb f4 <c3> 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 7e f6 20 fa e8 19
[ 2268.666404][    C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
[ 2268.674820][    C0] RAX: 1ffffffff11a5e87 RBX: ffffffff88c7a1c0 RCX: 1ffffffff134be76
[ 2268.682792][    C0] RDX: dffffc0000000000 RSI: ffffffff817850ae RDI: ffffffff873f8c1c
[ 2268.690779][    C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: fffffbfff118f439
[ 2268.698743][    C0] R10: fffffbfff118f438 R11: ffffffff88c7a1c7 R12: dffffc0000000000
[ 2268.706705][    C0] R13: ffffffff89a5c1c0 R14: 0000000000000000 R15: 0000000000000000
[ 2268.714690][    C0]  ? trace_hardirqs_on+0x5e/0x240
[ 2268.719721][    C0]  ? default_idle+0x1c/0x360
[ 2268.724321][    C0]  ? default_idle+0x4e/0x360
[ 2268.728914][    C0]  arch_cpu_idle+0xa/0x10
[ 2268.733263][    C0]  default_idle_call+0x84/0xb0
[ 2268.738021][    C0]  do_idle+0x413/0x760
[ 2268.742088][    C0]  ? arch_cpu_idle_exit+0x80/0x80
[ 2268.747116][    C0]  cpu_startup_entry+0x1b/0x20
[ 2268.751877][    C0]  rest_init+0x245/0x37b
[ 2268.756200][    C0]  arch_call_rest_init+0xe/0x1b
[ 2268.761056][    C0]  start_kernel+0x912/0x951
[ 2268.765582][    C0]  ? mem_encrypt_init+0xb/0xb
[ 2268.770263][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2268.776503][    C0]  ? x86_family+0x41/0x50
[ 2268.780833][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2268.787076][    C0]  x86_64_start_reservations+0x29/0x2b
[ 2268.792535][    C0]  x86_64_start_kernel+0x77/0x7b
[ 2268.797493][    C0]  secondary_startup_64+0xa4/0xb0
[ 2268.802536][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 2268.809237][    C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.459 msecs
[ 2268.809756][    C0] NMI backtrace for cpu 1
[ 2268.809763][    C0] CPU: 1 PID: 25001 Comm: syz-executor.3 Not tainted 5.3.0-rc1-next-20190726 #53
[ 2268.809770][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2268.809774][    C0] RIP: 0010:check_memory_region+0x41/0x1a0
[ 2268.809785][    C0] Code: 48 39 c7 48 89 e5 41 55 41 54 53 0f 86 07 01 00 00 4c 8d 5c 37 ff 49 89 f8 48 b8 00 00 00 00 00 fc ff df 4d 89 da 49 c1 e8 03 <4d> 8d 24 00 49 c1 ea 03 49 01 c2 4c 89 e0 49 8d 5a 01 49 89 d9 4d
[ 2268.809789][    C0] RSP: 0018:ffff8880ae9091d8 EFLAGS: 00000a06
[ 2268.809797][    C0] RAX: dffffc0000000000 RBX: ffff888094e441c8 RCX: ffffffff8159a3d7
[ 2268.809803][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888094e441c8
[ 2268.809808][    C0] RBP: ffff8880ae9091f0 R08: 1ffff110129c8839 R09: ffffed10129c883a
[ 2268.809813][    C0] R10: ffff888094e441cb R11: ffff888094e441cb R12: 0000000000000001
[ 2268.809819][    C0] R13: 0000000000000003 R14: ffffed10129c8839 R15: 0000000000000001
[ 2268.809824][    C0] FS:  00005555571ac940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 2268.809829][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2268.809834][    C0] CR2: 0000001b2fa37000 CR3: 00000000a3c0c000 CR4: 00000000001406e0
[ 2268.809837][    C0] Call Trace:
[ 2268.809840][    C0]  <IRQ>
[ 2268.809843][    C0]  __kasan_check_read+0x11/0x20
[ 2268.809847][    C0]  native_queued_spin_lock_slowpath+0xb7/0x9f0
[ 2268.809852][    C0]  ? __pv_queued_spin_lock_slowpath+0xd10/0xd10
[ 2268.809855][    C0]  ? mark_held_locks+0xf0/0xf0
[ 2268.809859][    C0]  do_raw_spin_lock+0x20e/0x2e0
[ 2268.809862][    C0]  ? rwlock_bug.part.0+0x90/0x90
[ 2268.809867][    C0]  ? lock_acquire+0x190/0x410
[ 2268.809870][    C0]  ? release_sock+0x20/0x1c0
[ 2268.809874][    C0]  ? __kasan_check_read+0x11/0x20
[ 2268.809877][    C0]  _raw_spin_lock_bh+0x3b/0x50
[ 2268.809881][    C0]  ? release_sock+0x20/0x1c0
[ 2268.809884][    C0]  release_sock+0x20/0x1c0
[ 2268.809888][    C0]  wait_on_pending_writer+0x20f/0x420
[ 2268.809891][    C0]  ? tls_init+0x560/0x560
[ 2268.809895][    C0]  ? __kasan_check_read+0x11/0x20
[ 2268.809899][    C0]  ? prepare_to_wait_exclusive+0x320/0x320
[ 2268.809902][    C0]  ? lock_downgrade+0x920/0x920
[ 2268.809906][    C0]  tls_sk_proto_cleanup+0x2c5/0x3e0
[ 2268.809910][    C0]  ? wait_on_pending_writer+0x420/0x420
[ 2268.809913][    C0]  ? trace_hardirqs_on+0x67/0x240
[ 2268.809917][    C0]  ? drain_stock.isra.0+0x1cb/0x240
[ 2268.809921][    C0]  tls_sk_proto_unhash+0x90/0x3f0
[ 2268.809924][    C0]  tcp_set_state+0x5b9/0x7d0
[ 2268.809928][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2268.809932][    C0]  ? __sk_mem_reduce_allocated+0x1b0/0x560
[ 2268.809936][    C0]  ? tcp_alloc_md5sig_pool+0x4a0/0x4a0
[ 2268.809940][    C0]  ? __sk_mem_reclaim+0x55/0x70
[ 2268.809944][    C0]  ? tcp_write_queue_purge+0x5d8/0x1310
[ 2268.809948][    C0]  ? lock_downgrade+0x920/0x920
[ 2268.809951][    C0]  tcp_done+0xe2/0x320
[ 2268.809954][    C0]  tcp_reset+0x132/0x500
[ 2268.809958][    C0]  tcp_validate_incoming+0xa2d/0x1660
[ 2268.809962][    C0]  tcp_rcv_established+0x6b5/0x1e70
[ 2268.809965][    C0]  ? tcp_data_queue+0x4860/0x4860
[ 2268.809969][    C0]  tcp_v6_do_rcv+0x41e/0x12c0
[ 2268.809972][    C0]  tcp_v6_rcv+0x31f1/0x3500
[ 2268.809976][    C0]  ? tcp_v6_syn_recv_sock+0x2290/0x2290
[ 2268.809980][    C0]  ? nf_confirm+0x360/0x4d0
[ 2268.809983][    C0]  ? mark_held_locks+0xf0/0xf0
[ 2268.809987][    C0]  ip6_protocol_deliver_rcu+0x2fe/0x1660
[ 2268.809991][    C0]  ip6_input_finish+0x84/0x170
[ 2268.809994][    C0]  ip6_input+0xe4/0x3f0
[ 2268.809998][    C0]  ? ip6_input_finish+0x170/0x170
[ 2268.810001][    C0]  ? __kasan_check_read+0x11/0x20
[ 2268.810005][    C0]  ? ip6_protocol_deliver_rcu+0x1660/0x1660
[ 2268.810009][    C0]  ? lock_downgrade+0x920/0x920
[ 2268.810013][    C0]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 2268.810016][    C0]  ip6_rcv_finish+0x1de/0x2f0
[ 2268.810020][    C0]  ipv6_rcv+0x10e/0x420
[ 2268.810024][    C0]  ? ip6_rcv_core.isra.0+0x1bb0/0x1bb0
[ 2268.810027][    C0]  ? lock_downgrade+0x920/0x920
[ 2268.810031][    C0]  ? lock_downgrade+0x920/0x920
[ 2268.810035][    C0]  ? ip6_rcv_finish_core.isra.0+0x560/0x560
[ 2268.810039][    C0]  ? trace_hardirqs_off+0x62/0x240
[ 2268.810043][    C0]  ? ip6_rcv_core.isra.0+0x1bb0/0x1bb0
[ 2268.810047][    C0]  __netif_receive_skb_one_core+0x113/0x1a0
[ 2268.810051][    C0]  ? __netif_receive_skb_core+0x3060/0x3060
[ 2268.810054][    C0]  ? lock_acquire+0x190/0x410
[ 2268.810058][    C0]  ? process_backlog+0x195/0x750
[ 2268.810062][    C0]  __netif_receive_skb+0x2c/0x1d0
[ 2268.810065][    C0]  process_backlog+0x206/0x750
[ 2268.810069][    C0]  ? lock_acquire+0x190/0x410
[ 2268.810073][    C0]  ? clockevents_program_event+0x15a/0x370
[ 2268.810076][    C0]  net_rx_action+0x508/0x10c0
[ 2268.810080][    C0]  ? napi_complete_done+0x4b0/0x4b0
[ 2268.810083][    C0]  ? sched_clock+0x2e/0x50
[ 2268.810087][    C0]  ? kvm_clock_read+0x18/0x30
[ 2268.810091][    C0]  ? inet_csk_listen_stop+0x1bc/0x850
[ 2268.810095][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2268.810098][    C0]  __do_softirq+0x262/0x98c
[ 2268.810102][    C0]  ? inet_csk_listen_stop+0x1bc/0x850
[ 2268.810106][    C0]  do_softirq_own_stack+0x2a/0x40
[ 2268.810109][    C0]  </IRQ>
[ 2268.810112][    C0]  do_softirq.part.0+0x11a/0x170
[ 2268.810116][    C0]  __local_bh_enable_ip+0x211/0x270
[ 2268.810120][    C0]  inet_csk_listen_stop+0x1e0/0x850
[ 2268.810123][    C0]  tcp_close+0xd5b/0x10e0
[ 2268.810127][    C0]  ? ip_mc_drop_socket+0x211/0x270
[ 2268.810130][    C0]  ? down_write+0xdf/0x150
[ 2268.810134][    C0]  inet_release+0xed/0x200
[ 2268.810137][    C0]  inet6_release+0x53/0x80
[ 2268.810141][    C0]  __sock_release+0xce/0x280
[ 2268.810144][    C0]  sock_close+0x1e/0x30
[ 2268.810147][    C0]  __fput+0x2ff/0x890
[ 2268.810150][    C0]  ? __sock_release+0x280/0x280
[ 2268.810154][    C0]  ____fput+0x16/0x20
[ 2268.810157][    C0]  task_work_run+0x145/0x1c0
[ 2268.810161][    C0]  exit_to_usermode_loop+0x316/0x380
[ 2268.810164][    C0]  do_syscall_64+0x65f/0x760
[ 2268.810168][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2268.810171][    C0] RIP: 0033:0x413511
[ 2268.810183][    C0] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2268.810186][    C0] RSP: 002b:00007ffd677954e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 2268.810195][    C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413511
[ 2268.810201][    C0] RDX: 0000000000000000 RSI: 0000000000000e64 RDI: 0000000000000004
[ 2268.810206][    C0] RBP: 0000000000000001 R08: 000000009b6aee68 R09: ffffffffffffffff
[ 2268.810211][    C0] R10: 00007ffd677955c0 R11: 0000000000000293 R12: 000000000075c9a0
[ 2268.810216][    C0] R13: 000000000075c9a0 R14: 0000000000760918 R15: ffffffffffffffff
[ 2268.810225][    C0] Kernel panic - not syncing: softlockup: hung tasks
[ 2269.470255][    C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G             L    5.3.0-rc1-next-20190726 #53
[ 2269.480047][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2269.490102][    C0] Call Trace:
[ 2269.493468][    C0]  <IRQ>
[ 2269.496334][    C0]  dump_stack+0x172/0x1f0
[ 2269.500684][    C0]  panic+0x2dc/0x755
[ 2269.504579][    C0]  ? add_taint.cold+0x16/0x16
[ 2269.509264][    C0]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2269.514991][    C0]  ? printk_safe_flush+0xf2/0x140
[ 2269.520018][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2269.526268][    C0]  ? watchdog_timer_fn.cold+0x5/0x2b
[ 2269.531561][    C0]  ? watchdog_timer_fn+0x56e/0x5c0
[ 2269.536695][    C0]  watchdog_timer_fn.cold+0x16/0x2b
[ 2269.541901][    C0]  __hrtimer_run_queues+0x364/0xe40
[ 2269.547110][    C0]  ? lockup_detector_update_enable+0xa0/0xa0
[ 2269.553209][    C0]  ? hrtimer_start_range_ns+0xcb0/0xcb0
[ 2269.558764][    C0]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2269.564489][    C0]  ? ktime_get_update_offsets_now+0x2d3/0x440
[ 2269.570735][    C0]  hrtimer_interrupt+0x314/0x770
[ 2269.575687][    C0]  smp_apic_timer_interrupt+0x160/0x610
[ 2269.581241][    C0]  apic_timer_interrupt+0xf/0x20
[ 2269.586194][    C0] RIP: 0010:check_memory_region+0x3d/0x1a0
[ 2269.592002][    C0] Code: 55 0f b6 d2 48 39 c7 48 89 e5 41 55 41 54 53 0f 86 07 01 00 00 4c 8d 5c 37 ff 49 89 f8 48 b8 00 00 00 00 00 fc ff df 4d 89 da <49> c1 e8 03 4d 8d 24 00 49 c1 ea 03 49 01 c2 4c 89 e0 49 8d 5a 01
[ 2269.611606][    C0] RSP: 0018:ffff8880ae809b10 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13
[ 2269.620107][    C0] RAX: dffffc0000000000 RBX: ffff888094e441c8 RCX: ffffffff8159a3d7
[ 2269.628083][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888094e441c8
[ 2269.636080][    C0] RBP: ffff8880ae809b28 R08: ffff888094e441c8 R09: ffffed10129c883a
[ 2269.644055][    C0] R10: ffff888094e441cb R11: ffff888094e441cb R12: 0000000000000001
[ 2269.652031][    C0] R13: 0000000000000003 R14: ffffed10129c8839 R15: 0000000000000001
[ 2269.660018][    C0]  ? apic_timer_interrupt+0xa/0x20
[ 2269.665140][    C0]  ? native_queued_spin_lock_slowpath+0xb7/0x9f0
[ 2269.671482][    C0]  __kasan_check_read+0x11/0x20
[ 2269.676347][    C0]  native_queued_spin_lock_slowpath+0xb7/0x9f0
[ 2269.682527][    C0]  ? __pv_queued_spin_lock_slowpath+0xd10/0xd10
[ 2269.688770][    C0]  ? mark_held_locks+0xf0/0xf0
[ 2269.693547][    C0]  ? kvm_clock_read+0x18/0x30
[ 2269.698309][    C0]  do_raw_spin_lock+0x20e/0x2e0
[ 2269.703158][    C0]  ? rwlock_bug.part.0+0x90/0x90
[ 2269.708091][    C0]  ? lock_acquire+0x190/0x410
[ 2269.712762][    C0]  ? tcp_write_timer+0x2b/0x1e0
[ 2269.717615][    C0]  _raw_spin_lock+0x37/0x40
[ 2269.722117][    C0]  ? tcp_write_timer+0x2b/0x1e0
[ 2269.726970][    C0]  tcp_write_timer+0x2b/0x1e0
[ 2269.731675][    C0]  call_timer_fn+0x1ac/0x780
[ 2269.736260][    C0]  ? tcp_write_timer_handler+0x8d0/0x8d0
[ 2269.741893][    C0]  ? msleep_interruptible+0x150/0x150
[ 2269.747259][    C0]  ? trace_hardirqs_on+0x5e/0x240
[ 2269.752275][    C0]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2269.757470][    C0]  ? tcp_write_timer_handler+0x8d0/0x8d0
[ 2269.763106][    C0]  run_timer_softirq+0x697/0x17a0
[ 2269.768131][    C0]  ? add_timer+0x930/0x930
[ 2269.772547][    C0]  ? kvm_clock_read+0x18/0x30
[ 2269.777217][    C0]  ? kvm_sched_clock_read+0x9/0x20
[ 2269.782322][    C0]  ? sched_clock+0x2e/0x50
[ 2269.786739][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[ 2269.791587][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2269.797829][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2269.804073][    C0]  __do_softirq+0x262/0x98c
[ 2269.808575][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[ 2269.813428][    C0]  irq_exit+0x19b/0x1e0
[ 2269.817583][    C0]  smp_apic_timer_interrupt+0x1a3/0x610
[ 2269.823127][    C0]  apic_timer_interrupt+0xf/0x20
[ 2269.828048][    C0]  </IRQ>
[ 2269.830981][    C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 2269.836363][    C0] Code: e8 a6 6d fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d f4 9f 48 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 9f 48 00 fb f4 <c3> 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 7e f6 20 fa e8 19
[ 2269.855968][    C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
[ 2269.864381][    C0] RAX: 1ffffffff11a5e87 RBX: ffffffff88c7a1c0 RCX: 1ffffffff134be76
[ 2269.872358][    C0] RDX: dffffc0000000000 RSI: ffffffff817850ae RDI: ffffffff873f8c1c
[ 2269.880327][    C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: fffffbfff118f439
[ 2269.888294][    C0] R10: fffffbfff118f438 R11: ffffffff88c7a1c7 R12: dffffc0000000000
[ 2269.896263][    C0] R13: ffffffff89a5c1c0 R14: 0000000000000000 R15: 0000000000000000
[ 2269.904270][    C0]  ? trace_hardirqs_on+0x5e/0x240
[ 2269.909294][    C0]  ? default_idle+0x1c/0x360
[ 2269.913886][    C0]  ? default_idle+0x4e/0x360
[ 2269.918474][    C0]  arch_cpu_idle+0xa/0x10
[ 2269.922803][    C0]  default_idle_call+0x84/0xb0
[ 2269.927562][    C0]  do_idle+0x413/0x760
[ 2269.931649][    C0]  ? arch_cpu_idle_exit+0x80/0x80
[ 2269.936675][    C0]  cpu_startup_entry+0x1b/0x20
[ 2269.941436][    C0]  rest_init+0x245/0x37b
[ 2269.947196][    C0]  arch_call_rest_init+0xe/0x1b
[ 2269.952042][    C0]  start_kernel+0x912/0x951
[ 2269.956540][    C0]  ? mem_encrypt_init+0xb/0xb
[ 2269.961212][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2269.967447][    C0]  ? x86_family+0x41/0x50
[ 2269.971794][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2269.978035][    C0]  x86_64_start_reservations+0x29/0x2b
[ 2269.983488][    C0]  x86_64_start_kernel+0x77/0x7b
[ 2269.988425][    C0]  secondary_startup_64+0xa4/0xb0
[ 2269.994551][    C0] Kernel Offset: disabled
[ 2269.998877][    C0] Rebooting in 86400 seconds..