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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREADLINK(r4, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) dup3(r0, r1, 0x0) 08:40:32 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) 08:40:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000007", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:32 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) (rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) r3 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) (async) socket(0x22, 0x5, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f"], 0x3}}, 0x0) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (rerun: 64) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 08:40:32 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640), 0x0, 0x0) 08:40:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000000b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x8, 0x8}) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000180), 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x27, 0xffffffff, 0x4000, 0x2, 0x7f, 0x1ff, 0x512}}, 0x50) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10510}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20801, 0x0) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r6 = memfd_create(&(0x7f0000000680)='\x00', 0x3) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) (async) r8 = openat$sysfs(0xffffff9c, &(0x7f00000008c0)='/sys/module/tipc', 0x80000, 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x324, r10, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffffffffffff52, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x640100ff}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r11 = openat$cachefiles(0xffffff9c, &(0x7f0000000b00), 0xc0400, 0x0) io_submit(0x0, 0x8, &(0x7f0000000b80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000380)="0e09b23c3bd4a1769ab58eed3f2fe099f2d7d787c2cdae200cb993f10ba4873be8e414ab3e09a81f7eddc47373d23db2fa", 0x31, 0x2, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000cc0)="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", 0x1000, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xea89, 0xffffffffffffffff, &(0x7f00000007c0)="9398731e81e77b515c4b48408d873172f946c63de87082d247183fdf311c66ada61d82bc233dbb0333f3f5a896b0ff18bd9c120a35707cc07d98b0492c3f5075f5a1b98331d67cc7123920cfecec6a93d3f3b824107b3941c84f032cd661fe486cb1ab143b7d47d0c5e574a751bb863d03090495599c1d4f816d3df217c6d09942db2d88729b90f76afbd0a9baedf533756c9224831f1215af0be8e6d32c365543b0c0c34baea4e4cb046ee02a29736e7321d296bdcbe2876c74dca2f93b61b26687592f1b7d326184", 0xc9, 0xed73, 0x0, 0x3, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000005c0)="3a967e0dc105ee50890da775f0a4d04b9ccc9e341c2b7f33ad62dfc96aaacdd1d0ba68e622eeeea4", 0x28, 0xc4, 0x0, 0x3, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x3, r6, &(0x7f0000008380)="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", 0x1000, 0x813, 0x0, 0x3, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8, r7, &(0x7f0000000740)="2f3184fdad7520b70089bda6deb59c8f3273838888a7723b7e", 0x19, 0x9, 0x0, 0x0, r8}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000940)="ef3f64e8d8984c915f74b17a2cffc0ec63a92a37599e4ee6462a2a787a177411d3a83802f3856091c18664e5c67eb7a1427e4bb835c00b968c055bdac3c6e160f2509cb309c0876ee9e56921bbc5fd209a59a294571efa9fa1fe4214e230fd72354c644d8334f41221d43bebcfde4d50b417f30b62d0dc879b1459adad194f28d7410ae7cee189662c1cfcd1f7ca273971133b65cf57a37ec0facb025e571a1785591840ee05dc523df2dd88c7f25888773aacdfc4a8b7b0bfd501fe190e52998c38878c88c28f", 0xc7, 0xffffffffffffff40, 0x0, 0x2, r0}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x6fd1, r9, &(0x7f0000000a80)="6f012d46ef85dd1f9639af7a5b50bdc45d66289e24fdd7057c5753a4ee6b6f4bc6c6e2697f3043cf497fe2b6e2dc4a4bb3bb8d87ecf5e369bd5dfc76f3eadc4b810b5b899a34", 0x46, 0x6, 0x0, 0x3, r11}]) io_setup(0x202, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r15 = fcntl$dupfd(r13, 0x0, r14) sendmsg$IPVS_CMD_SET_SERVICE(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r15, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x25e3998b, 0x1ff, 0x2}, 0x14) io_submit(r12, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000780)='!', 0x1001}]) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREADLINK(r4, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) dup3(r0, r1, 0x0) 08:40:32 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$caif_stream(0x25, 0x1, 0x2) (async) r3 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) socket(0x22, 0x5, 0x7) (async) socket(0x22, 0x5, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 08:40:33 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000001f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:33 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000024", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) 08:40:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) (async) 08:40:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000038", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:35 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) (async) fcntl$dupfd(r4, 0x0, r5) (async) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) (async) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) (async) 08:40:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) 08:40:35 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640), 0x0, 0x0) 08:40:35 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000003f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff5e, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) 08:40:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000040", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:35 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) 08:40:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640), 0x0, 0x0) 08:40:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000f0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000ffff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:36 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) (async) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) (rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) 08:40:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00007f00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:37 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 08:40:38 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:38 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x7}, [@network_terminal={0x7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0xb9}, @ncm={0x6, 0x24, 0x1a, 0x0, 0xb}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x3, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x0, 0x0}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8b, {0x9, 0x21, 0x3, 0x60, 0x1, {0x22, 0xea7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x1f, 0x40}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x1, 0x8, 0x8, 0x27}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "4e3ac3811387f61a0f239a1d48ef3d566537bed20d20c1320de351cef81c9729a58d22118e464885db2d483827ed7d2be0395a068d3c9f9ee99a6e48e88e16dc205d91cc1b4645901b54ed0943831900ea306a75a81062bc7838"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) 08:40:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 480.370317][ T54] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 480.860423][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.910522][ T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 480.922491][ T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 08:40:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:39 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 08:40:39 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) 08:40:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 481.520860][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.565823][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.630275][ T54] usb 3-1: SerialNumber: Ф 08:40:39 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 08:40:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 481.700860][T14902] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 08:40:39 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 481.946298][T14902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 08:40:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 481.995863][T14902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.193835][ T54] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 482.220909][ T54] usb 3-1: USB disconnect, device number 33 08:40:40 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x7}, [@network_terminal={0x7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0xb9}, @ncm={0x6, 0x24, 0x1a, 0x0, 0xb}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x3, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x0, 0x0}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8b, {0x9, 0x21, 0x3, 0x60, 0x1, {0x22, 0xea7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x1f, 0x40}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x1, 0x8, 0x8, 0x27}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "4e3ac3811387f61a0f239a1d48ef3d566537bed20d20c1320de351cef81c9729a58d22118e464885db2d483827ed7d2be0395a068d3c9f9ee99a6e48e88e16dc205d91cc1b4645901b54ed0943831900ea306a75a81062bc7838"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) 08:40:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:41 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 483.249274][T14941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.258377][T14941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:40:41 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000f1b2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 483.520458][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 483.982099][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.991989][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.005296][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 08:40:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @raw_data=[0xbd, 0x100, 0x18, 0x0, 0x3, 0x1000, 0x0, 0x9, 0x10001, 0x7, 0x4, 0xd95d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5847, 0x5, 0x1000, 0x80000001, 0x9, 0x0, 0x6, 0x81, 0xfffffff0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x34c5]}) 08:40:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) 08:40:42 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x5, 0x1, 0x6}}, 0xa) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000044c0), 0x4) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 08:40:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 484.506795][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.544987][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 08:40:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 484.575388][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.592972][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.615026][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.626811][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.653700][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.669329][ T9] usb 3-1: SerialNumber: Ф [ 484.681498][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.702545][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.711641][T14940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 484.730540][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.798932][ T5152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.854999][ T5152] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 08:40:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:43 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x5, 0x1, 0x6}}, 0xa) (async, rerun: 32) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) (async, rerun: 32) write$UHID_DESTROY(r0, &(0x7f00000044c0), 0x4) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 485.002391][ T9] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 485.038259][ T9] usb 3-1: USB disconnect, device number 34 08:40:43 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x7}, [@network_terminal={0x7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0xb9}, @ncm={0x6, 0x24, 0x1a, 0x0, 0xb}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x20, 0x3}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x3, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x424}}, {0x0, 0x0}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x8b, {0x9, 0x21, 0x3, 0x60, 0x1, {0x22, 0xea7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x1f, 0x40}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x5, 0x1, 0x8, 0x8, 0x27}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "4e3ac3811387f61a0f239a1d48ef3d566537bed20d20c1320de351cef81c9729a58d22118e464885db2d483827ed7d2be0395a068d3c9f9ee99a6e48e88e16dc205d91cc1b4645901b54ed0943831900ea306a75a81062bc7838"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) 08:40:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000100", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 485.548917][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.559747][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.567357][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.574830][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.582322][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.589740][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.598247][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.607330][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.615857][ T5148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 485.626944][ T5148] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 08:40:43 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x5, 0x1, 0x6}}, 0xa) (async, rerun: 64) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) (rerun: 64) write$UHID_DESTROY(r0, &(0x7f00000044c0), 0x4) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 485.736228][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.750942][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.792090][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.798338][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.818106][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:40:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00003495", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 485.842182][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.862278][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.869789][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.882623][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.899936][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.929870][ T5149] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 485.990349][ T5148] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 486.041308][ T5149] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.580738][ T5148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.590587][ T5148] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.601024][ T5148] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 487.253519][ T5148] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.262790][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.272445][ T5148] usb 3-1: SerialNumber: Ф [ 487.300832][T14971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.572089][ T5148] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 487.582374][ T5148] usb 3-1: USB disconnect, device number 35 08:40:45 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 08:40:45 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x5, 0x1, 0x6}}, 0xa) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000044c0), 0x4) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 08:40:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000ffff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (fail_nth: 1) 08:40:45 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x10, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x4955}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 08:40:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 08:40:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000f0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000feff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 08:40:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x10, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x4955}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) [ 488.803050][T14990] FAULT_INJECTION: forcing a failure. [ 488.803050][T14990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.862669][T14990] CPU: 0 PID: 14990 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 488.873202][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 488.883251][T14990] Call Trace: [ 488.886520][T14990] [ 488.889456][T14990] dump_stack_lvl+0x125/0x1b0 [ 488.894129][T14990] should_fail_ex+0x496/0x5b0 [ 488.898797][T14990] _copy_to_iter+0x1f6/0x1230 [ 488.903478][T14990] ? _copy_from_iter_nocache+0x1160/0x1160 [ 488.909370][T14990] ? __up_read+0x1fc/0x750 [ 488.913786][T14990] ? __gup_longterm_locked+0x2570/0x2570 [ 488.919440][T14990] ? up_write+0x510/0x510 [ 488.923792][T14990] copy_page_to_iter+0xf1/0x180 [ 488.928706][T14990] process_vm_rw_core.constprop.0+0x5cd/0xa10 [ 488.934840][T14990] ? vmalloc_dump_obj+0x290/0x290 [ 488.939930][T14990] process_vm_rw+0x2ff/0x360 [ 488.944735][T14990] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 488.951021][T14990] ? ksys_write+0x214/0x250 [ 488.955554][T14990] ? reacquire_held_locks+0x4b0/0x4b0 [ 488.960968][T14990] ? vfs_write+0x14c/0xe40 [ 488.965434][T14990] ? bit_wait_io_timeout+0x160/0x160 [ 488.970770][T14990] ? __fget_files+0x272/0x410 [ 488.975486][T14990] ? fput+0x30/0x1a0 [ 488.979455][T14990] ? ksys_write+0x1a7/0x250 [ 488.983991][T14990] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 488.989749][T14990] ? lockdep_hardirqs_on+0x7d/0x100 [ 488.994978][T14990] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 489.001598][T14990] __do_fast_syscall_32+0x61/0xe0 [ 489.006642][T14990] do_fast_syscall_32+0x33/0x70 [ 489.011487][T14990] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 489.017808][T14990] RIP: 0023:0xf7f2e579 [ 489.021905][T14990] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.041516][T14990] RSP: 002b:00000000f7f295ac EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 489.049929][T14990] RAX: ffffffffffffffda RBX: 00000000000005aa RCX: 0000000020008400 [ 489.057906][T14990] RDX: 0000000000000001 RSI: 0000000020008640 RDI: 0000000000000001 [ 489.065879][T14990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.073860][T14990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 489.081826][T14990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.089807][T14990] 08:40:48 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 08:40:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000ffff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 08:40:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x4c, 0x4a, 0x10, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x4955}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 08:40:48 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:48 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (fail_nth: 2) 08:40:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:49 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 08:40:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r1, 0x309, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 08:40:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:49 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x319c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/54, 0x36}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/196, 0xc4}], 0x6, &(0x7f0000001540)=""/157, 0x9d}, 0x22) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001640)=0xffff0000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x130, r6, 0x77c3e197175b6ff9, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x0, 0x0, 0x0, "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"}}]}]}, 0x130}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002140)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x44852) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdfaa000005002d000100000008003b0069000000080032008000000005002f000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000004740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) 08:40:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 491.630243][ T28] audit: type=1326 audit(1695026449.732:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 491.637642][T15042] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.775559][ T28] audit: type=1326 audit(1695026449.742:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.050764][ T28] audit: type=1326 audit(1695026449.742:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.075804][ T28] audit: type=1326 audit(1695026449.742:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.098680][ T28] audit: type=1326 audit(1695026449.742:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.142699][ T28] audit: type=1326 audit(1695026449.742:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.250519][ T28] audit: type=1326 audit(1695026449.742:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.273185][ T28] audit: type=1326 audit(1695026449.742:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.301356][ T28] audit: type=1326 audit(1695026449.742:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.327386][ T28] audit: type=1326 audit(1695026449.742:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15041 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 492.843316][T15021] FAULT_INJECTION: forcing a failure. [ 492.843316][T15021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.859290][T15021] CPU: 1 PID: 15021 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 492.869749][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 492.879822][T15021] Call Trace: [ 492.883103][T15021] [ 492.886033][T15021] dump_stack_lvl+0x125/0x1b0 [ 492.890722][T15021] should_fail_ex+0x496/0x5b0 [ 492.895492][T15021] _copy_to_user+0x30/0xb0 [ 492.899920][T15021] simple_read_from_buffer+0xd0/0x150 [ 492.905303][T15021] proc_fail_nth_read+0x1b0/0x280 [ 492.910343][T15021] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 492.916083][T15021] ? security_file_permission+0xdc/0x100 [ 492.921730][T15021] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 492.927502][T15021] vfs_read+0x1ce/0x930 [ 492.931677][T15021] ? kernel_read+0x1b0/0x1b0 [ 492.936280][T15021] ? __fget_files+0x272/0x410 [ 492.940971][T15021] ksys_read+0x12f/0x250 [ 492.945216][T15021] ? vfs_write+0xe40/0xe40 [ 492.949641][T15021] __do_fast_syscall_32+0x61/0xe0 [ 492.954672][T15021] do_fast_syscall_32+0x33/0x70 [ 492.959535][T15021] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 492.965959][T15021] RIP: 0023:0xf7f2e579 [ 492.970026][T15021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 492.989637][T15021] RSP: 002b:00000000f7f295e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 492.998078][T15021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7f29670 [ 493.006058][T15021] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 493.014027][T15021] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 493.022083][T15021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 493.030139][T15021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.038131][T15021] 08:40:52 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:40:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:52 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x319c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/54, 0x36}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/196, 0xc4}], 0x6, &(0x7f0000001540)=""/157, 0x9d}, 0x22) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001640)=0xffff0000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x130, r6, 0x77c3e197175b6ff9, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x0, 0x0, 0x0, "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"}}]}]}, 0x130}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002140)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) (async) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x44852) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdfaa000005002d000100000008003b0069000000080032008000000005002f000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000004740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) 08:40:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x319c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/54, 0x36}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/196, 0xc4}], 0x6, &(0x7f0000001540)=""/157, 0x9d}, 0x22) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001640)=0xffff0000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x130, r6, 0x77c3e197175b6ff9, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x0, 0x0, 0x0, "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"}}]}]}, 0x130}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002140)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x44852) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdfaa000005002d000100000008003b0069000000080032008000000005002f000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000004740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100025bd7000fcdbdf2502000000060028060000000005002f00010000000500370001000000df1dd32236d0627196267f1046c05b055a6623afb6786533db495d0cf434e454bd58a674616e1412bcc69740235280891dc5bcf0c2acb96b12541e3d4a29e97ba42e64e7b46f4933c9b9ae9745ab9251ff3d8403f2dcd3b8e724af848ae63b16263edca7735be1d5ba53f7f57df98cbb92709490e5e5ebb9ed57b2b78e03a3cbf31948fdbaab08a38a5efd75cfa9791dd4b25ca30e6cf641915b86b546255648b4a191b71032f084bfa76359eac1ff63a63ed95ff1a6e8d86eac7f7e2e15239516f4125f44750044296d9f483e882339495d02060e2594fddc11afb099e7a2ce57fdc6b509a9671e00443cbd63b34f9e03c6b95cea6b7e8d4e2b4057b2e877c82f5381277c92faf4044991c4ef637ea7b2d9f5962725e48043e0553a"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) 08:40:52 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:40:52 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 494.344803][T15067] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:52 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x319c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/54, 0x36}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/196, 0xc4}], 0x6, &(0x7f0000001540)=""/157, 0x9d}, 0x22) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001640)=0xffff0000, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) (async) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) shutdown(r1, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x130, r6, 0x77c3e197175b6ff9, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x0, 0x0, 0x0, "8bc8ed45b863665835ba5039526bf03ab05dfc5ccb011379818d2571117651fb21c1ca4ac9873647567958834270fd378fd32b96c103e9373f8035f9069b871614943af3b49871bb275cb5731bdd11379fd46931f189d08ad3f5a1f323b7e118a1d22c0c98670dab553c83da93dc8edd33d1b9128ce7394d71184204bfe0533938fa89657bf98e92d55115d04ab1547bfe47afb022c4061b7c191622aa3a9c5ca23087b810fac4547453779cc2f59af607f9988603eae51f6e14a5792fb4d8cedd9ad79c8905e4d70cb5c0c2b5a12ce329adbd6d10a87ad99cb726e2c117ada3879b0232e7118e40215e8e491c7944e9f4195cc8afbf70926847f6f9f3"}}]}]}, 0x130}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002140)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x44852) (async) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdfaa000005002d000100000008003b0069000000080032008000000005002f000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000004740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000080) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) 08:40:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 08:40:55 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:40:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:55 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x319c, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/54, 0x36}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/196, 0xc4}], 0x6, &(0x7f0000001540)=""/157, 0x9d}, 0x22) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001640)=0xffff0000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x130, r6, 0x77c3e197175b6ff9, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@measure_req={0x26, 0x100, {0x0, 0x0, 0x0, "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"}}]}]}, 0x130}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002140)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x94, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRES64=r2], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x44852) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000048c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdfaa000005002d000100000008003b0069000000080032008000000005002f000100"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x2000c881) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000004740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100025bd7000fcdbdf2502000000060028060000000005002f00010000000500370001000000df1dd32236d0627196267f1046c05b055a6623afb6786533db495d0cf434e454bd58a674616e1412bcc69740235280891dc5bcf0c2acb96b12541e3d4a29e97ba42e64e7b46f4933c9b9ae9745ab9251ff3d8403f2dcd3b8e724af848ae63b16263edca7735be1d5ba53f7f57df98cbb92709490e5e5ebb9ed57b2b78e03a3cbf31948fdbaab08a38a5efd75cfa9791dd4b25ca30e6cf641915b86b546255648b4a191b71032f084bfa76359eac1ff63a63ed95ff1a6e8d86eac7f7e2e15239516f4125f44750044296d9f483e882339495d02060e2594fddc11afb099e7a2ce57fdc6b509a9671e00443cbd63b34f9e03c6b95cea6b7e8d4e2b4057b2e877c82f5381277c92faf4044991c4ef637ea7b2d9f5962725e48043e0553a"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000002280)=""/192, 0xc0}, {&(0x7f0000002340)=""/108, 0x6c}], 0x7}, 0x3}, {{&(0x7f0000002440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000024c0)=""/48, 0x30}, {&(0x7f0000002500)=""/92, 0x5c}, {&(0x7f0000002580)=""/228, 0xe4}, {&(0x7f0000002680)=""/207, 0xcf}], 0x5, &(0x7f0000002800)=""/121, 0x79}, 0x7f}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/60, 0x3c}], 0x1, &(0x7f0000002980)=""/160, 0xa0}, 0x1}, {{&(0x7f0000004540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/199, 0xc7}], 0x2, &(0x7f0000002c80)=""/255, 0xff}, 0x3}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/67, 0x43}], 0x4, &(0x7f0000002fc0)=""/26, 0x1a}, 0xa6}, {{&(0x7f0000003000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003080)=""/38, 0x26}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/97, 0x61}, {&(0x7f0000004140)=""/116, 0x74}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x5, &(0x7f0000004300)=""/3, 0x3}, 0x4}, {{&(0x7f0000004340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/61, 0x3d}], 0x1}, 0x9}], 0x7, 0x0, &(0x7f0000004600)) 08:40:55 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x65}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:40:55 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 497.217481][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 497.217500][ T28] audit: type=1326 audit(1695026455.332:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.313913][ T28] audit: type=1326 audit(1695026455.332:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.389358][ T28] audit: type=1326 audit(1695026455.382:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.432319][ T28] audit: type=1326 audit(1695026455.382:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 08:40:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 497.467403][ T28] audit: type=1326 audit(1695026455.382:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.523363][ T28] audit: type=1326 audit(1695026455.382:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 08:40:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 497.657583][ T28] audit: type=1326 audit(1695026455.382:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.742028][ T28] audit: type=1326 audit(1695026455.382:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.764787][ T28] audit: type=1326 audit(1695026455.392:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7ff9579 code=0x7ffc0000 [ 497.787462][ T28] audit: type=1326 audit(1695026455.392:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15096 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff9579 code=0x7ffc0000 08:40:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:56 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:40:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 08:40:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:58 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x2, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:40:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:40:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:40:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:59 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:40:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:40:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@tcp}, 0x20) [ 501.734897][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741720][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:41:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000f0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:00 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x3, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000002", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000003", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:01 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000004", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:01 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000005", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:01 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x7, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:02 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000006", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:03 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000007", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:03 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000008", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000000b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:03 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x8, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000024", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:05 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000038", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:05 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:05 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000f0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:06 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:06 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:06 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0xc, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:07 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:08 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:09 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:10 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:10 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x10, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:10 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:11 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000ff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:12 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:13 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:13 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:13 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0xf000, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a0000007f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:14 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:14 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:16 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:16 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0xfffff000, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:17 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:17 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:17 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:17 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:18 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000f1", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:19 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:20 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:20 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:20 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:20 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x43}], 0x1, 0x0) 08:41:20 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:20 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:20 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000001", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00000034", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000ff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:21 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:22 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:23 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:23 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:23 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x125}], 0x1, 0x0) 08:41:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000fe", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:23 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:23 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a000000ff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:24 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:26 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:26 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x2, 0x0) 08:41:26 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:26 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:26 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:26 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:26 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:29 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:29 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:29 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:29 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:29 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x3, 0x0) 08:41:29 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:29 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:29 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:32 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r0}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:32 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:32 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:32 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x7, 0x0) 08:41:32 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:33 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x300, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:33 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:33 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x600, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x700, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:35 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r0}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:35 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:36 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x8, 0x0) 08:41:36 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:36 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x804, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:36 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x805, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:36 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r0}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x807, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:37 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x808, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x80b, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0xc, 0x0) 08:41:39 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:39 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:39 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x824, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x838, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x6000, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:40 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x10, 0x0) 08:41:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:42 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0xf000, 0x0) 08:41:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8902, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:43 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:43 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x892f, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:43 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:44 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x2, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:44 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:45 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0xfffff000, 0x0) 08:41:45 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x3, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:45 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:47 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:47 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:41:47 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:48 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:48 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x2) 08:41:48 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:48 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:49 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:50 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x5, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:50 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x5) 08:41:50 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:51 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:51 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x7, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:51 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x6) 08:41:53 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:53 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x8, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x8) 08:41:53 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x9, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0xb, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0xc, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:54 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0xf) 08:41:54 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:56 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x500) 08:41:56 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:56 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:56 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:41:58 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x600) 08:41:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:59 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:41:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x7, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:41:59 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x810) 08:41:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:01 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0xb36) 08:42:01 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xb, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 563.166890][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.176029][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:42:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x24, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x38, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:02 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:02 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0xf00) 08:42:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:04 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x1008) 08:42:04 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:04 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4538, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:05 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:06 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:06 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x2000) 08:42:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:06 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:07 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:07 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:07 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x360b) 08:42:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x6, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:08 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:08 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x3f00) 08:42:08 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:08 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x7, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xb, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x50000) 08:42:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:11 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x24, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:11 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x200000) 08:42:11 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:12 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x38, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xf0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x500, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x600, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x700, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x1000000) 08:42:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:15 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xb00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3800, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xf000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:16 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x2000000) 08:42:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:18 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:18 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:18 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x5000000) 08:42:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:18 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x5, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x6, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x7, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:21 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x6000000) 08:42:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x8, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:21 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:21 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:22 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x24, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:22 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x38, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:22 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x8000000) 08:42:22 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xf0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:22 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:25 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:25 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x8100000) 08:42:25 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:25 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x500, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x600, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x700, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xb00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0xf000000) 08:42:28 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:28 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x1f00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x2400, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3800, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x3f00, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:29 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xf000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:31 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xffff, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:31 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x360b0000) 08:42:31 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:34 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x3f000000) 08:42:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:34 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:34 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x24, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x38, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:37 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x8000000) 08:42:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:37 executing program 1: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000300), 0x200a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x810, r0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000000e06010800000000000000000a0000030900020073797a31000000000900020073797a300000000005000100070000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x400c0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/143, 0x8f}], 0x3a, &(0x7f0000000700), 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f0000000680)={&(0x7f0000ffc000/0x2000)=nil}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:37 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:37 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:37 executing program 1: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000300), 0x200a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x810, r0, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000000e06010800000000000000000a0000030900020073797a31000000000900020073797a300000000005000100070000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r1 = getpid() (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x400c0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/143, 0x8f}], 0x3a, &(0x7f0000000700), 0x3, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f0000000680)={&(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:38 executing program 1: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000300), 0x200a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x810, r0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000000e06010800000000000000000a0000030900020073797a31000000000900020073797a300000000005000100070000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) (async, rerun: 64) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) r1 = getpid() r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x400c0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r3, &(0x7f0000000500)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/143, 0x8f}], 0x3a, &(0x7f0000000700), 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f0000000680)={&(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:38 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() r1 = openat$vimc1(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002200)={0x68af, 0x10001, {0x0}, {}, 0x4, 0x1}) sched_setscheduler(r2, 0x0, &(0x7f0000002240)=0x9) fstat(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001c80)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r6, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r8, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r9 = openat$proc_mixer(0xffffff9c, &(0x7f0000001f00)='/proc/asound/card1/oss_mixer\x00', 0x8002, 0x0) r10 = openat$vga_arbiter(0xffffff9c, &(0x7f0000001f40), 0x8103, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r12, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r13 = openat$binder_debug(0xffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)="0e89ede82dd46c2f39f8e1fd0075064201486c221de71ef1722a27d1564e452518aadff710e97fcd6ac8a62328b922ce6753ced8176b7527a311434028546baf02b1dca5c0badeb147010039b36fb880c0309ada3151ac315721bcb0cc75aef3456d0ca61f24c7f3253c2e01fd98daf5e91ece1b56acd64c2d3b219b7e317c30a949c312d095abc69986578c1f9adfd6a8d72bede4dadc0aab3b6fed914c0837db7a3e0e9f3a0949f723af", 0xab}, {&(0x7f0000000280)="103c76a5b2bee0925dfc84067545224e47870ff2c8c0b33069edaedb2a2805093265bfba4386d78244bd0bcf4d4d67ccbd87e7b19ca65493653d505801b1cbc9b21c1da2eab9c075e8cb03b225e6bf8dfed09358d9c6280f9801a66b29a9c763e0db6057ff", 0x65}, {&(0x7f0000000300)="07ce6a8ef84bb6947ecc937ae1fd706fa5555ccdcd40788aa17ccc6aac56aee1e4d99aa59bc69424981e78ed80a46dfd03e034fefd12a8a91958883cd8c3c682446d2312b051747c3d6cb8d2bf870a1907fcf814a792e722d43e6e1afa2bad79df3116b17e4072d27bde7a85867659b81c311bd031471ea50232a1b1e446cb7595fe3a677c974b394036773c475880ffcddd655ae4b43f77c63dee1b6b3ad659dd64243479c0dc81263208dda993caac5bc1801d3db9c45faaaf241ef224df4982d2f6ef624ab2d3821fa504ca66351346824a6fb44cdd9390f0e0e5af15b91a5d724c55c3dc23926eecfbb88e8ded4f0f", 0xf1}], 0x3, &(0x7f0000000440)=[@cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x2c}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000500)="618ee8d09be1433f52a53a64f78be79ccdffe645806fffa4ce397bba4073ba89ac6cda565427e17624069832b27d65040fb1c67bbf3eb425f5dd6e280b7a271fe6fee02d48ede84d120b152d474afabcd4a6f994a1e331495d9de1cfe0c0435e115a9b8a5404e47e56a501a926dc003aa1300603b90066121679aa2d3124fe210ab129ee6b0baafac28b5e9d4d02a153367759b6770f50d6f8ff3fa0f988fca2b8bbea409053f8e831c2b98b", 0xac}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="95170702653d0680772a407a30e590387f46e2701fc6ea067d6b7c080a0342f4f82ddae677a536955b61707c756cde55b0b533f135e4a4977848202dcea87752ca9ecab6f16434796bc318ae9d03625c773528f77ce23a595d9ed6031dc1ea3547ba755a049abbe5b7d3403b5cde2022089c37710b02a8f6ea9e16f9b569c9c7a8890f7671bc3f8d3c9c9446e4e3d95e49573d59df4e05a7e1ecec12b1ec673fa5f7630744dcf6c895e17c326df97ae6e51372f54d731c291d431d7cfe341891fa9d66a458105fd59f7a7bdde1f062b796445b06", 0xd4}], 0x3, 0x0, 0x0, 0x40811}}, {{&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)="48f70c6c26cde2019221004f2136118131428aab70911f3f699f9d91b2fcf0fb98380d0588c44df686fe941b06ebfc671cb3128a99d7dff974239d3724d6ba094b49301a5d69ca5ce7cd1543088b1c8d6a84fdaa178a64d1b7b16e61d844c79cffe2f399cba64ee4cc6452179a994fce55ad247715da734a4ab4c70431a876e109765819e16d1068cf67c16620b748b4abaaee25a1091de0f6bb16d459a5", 0x9e}, {&(0x7f0000001840)="f20ee6170e58a22eba6e72f83120cb4019bf8767bcb4a1ac0d9a74bd4122648abe86eff8fcd4bd", 0x27}, {&(0x7f0000001880)="4d672b28ea71b926d46a004bbf562bcc92660afd5c3d74d6a79451f3a6a4fd59ee5ddeedfa136190f7b09350e615fcb2cd600648b36cbf6255d3e8361029ff7f5b78e3a6e0cee0c416200badfc5b2117b7240173cf68636f", 0x58}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="162d1686225d45e1de98a3fde29568f85581b16b45624dee458331b9ab3ab325fa2cc85be708eb207cd9ba17ac6859bcf1dd7912d829032695c73d831902a116ba4a5eb827b909d3a125312c6c3bc704d75286ecc4f8371ec59bc09da50ab83090d5d979969cf3d4bbaaadad7b08d3118548d68f124873868dcb263651ad518ebea2433681719c036e160611352fa3f8f6a4c51b640f1b0470f577ac5af55d15c7006b6f8f9e32a9d5cecc9c89d1f34699f18358b981f39b4ae4fddda7f405c0d9e72512", 0xc4}, {&(0x7f0000001ac0)="39484a1c408fc4299c2a309e2d5cd0bace4a821f4cf278a200e9fe4adef92eb2064b63007a2817faa0ed4b454460d475c0c4d7a8e9f1fd594b308e93d0a57652141839c2f8fc913e23a85d9951f9e41620cb3f428277b9bd07414c8d1d9113454e80678380dbe14c35573cb773cb79282a891b764bc9a959545429eb7e9a9d76faac935b598a04ff08326e5de851fe990247c5c2685043f5d04f2182a1492ec3930693b004a53127469a15d283902101c48c6d190e85c0cf6f11673c6f5ab8975853f21d3dd1eafc20e46cc6bb4c5ce5e74e23dd0b42dea684026dfddffdd22083d4d8b7decd113e11c172ef901099bc", 0xf0}], 0x2, &(0x7f0000001cc0)=[@cred={{0x18, 0x1, 0x2, {r0, r3, r4}}}], 0x18, 0x2800}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="d9b2c71c65c2319747d0eb535e921f8a8139c6392a14ec905903daf29068bfef24e11a264acbbf9efa5b5f9ed52111a33e9dc042aaa27f3ba4dd551c9dbbac2931f5f9a4cc458d97721235158292b84d96b78b9600713e213afec9163649f4804597e0779bebc3a5feb93b4a52018dc803961c0817374d5c3e595621736270ba8c7c417d9d4784c577df7cc14d8a7914995edf2c1f907536407201b76a4224ed74552f860d7f4f4a4609e27dd78959c1d735f1e61f95755de88641cee69beb852d036e78bd4d3d60a9c940186c441b12b2e44f6760f03ba51d2767d273442a281f163c81a7ed661bc0a1c9de32", 0xed}, {&(0x7f0000001e80)="9e415d146d4c9935621134698ddd12b5bd7ba34e402913b964d4", 0x1a}], 0x2, &(0x7f0000001fc0)=[@cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, r11]}}, @rights={{0x10, 0x1, 0x1, [r13]}}], 0x6c, 0x4004050}}], 0x5, 0x90) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x330a2ad7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 08:42:38 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 601.362925][T16217] tipc: Enabling of bearer rejected, failed to enable media [ 601.409543][T16217] tipc: Enabling of bearer rejected, failed to enable media [ 601.459157][T16217] tipc: Enabling of bearer rejected, failed to enable media 08:42:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:40 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:40 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x2000) 08:42:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() (async) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002200)={0x68af, 0x10001, {0x0}, {}, 0x4, 0x1}) sched_setscheduler(r2, 0x0, &(0x7f0000002240)=0x9) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) getgroups(0x5, &(0x7f0000001c80)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r6, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r8, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r9 = openat$proc_mixer(0xffffff9c, &(0x7f0000001f00)='/proc/asound/card1/oss_mixer\x00', 0x8002, 0x0) (async) r10 = openat$vga_arbiter(0xffffff9c, &(0x7f0000001f40), 0x8103, 0x0) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r12, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) r13 = openat$binder_debug(0xffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)="0e89ede82dd46c2f39f8e1fd0075064201486c221de71ef1722a27d1564e452518aadff710e97fcd6ac8a62328b922ce6753ced8176b7527a311434028546baf02b1dca5c0badeb147010039b36fb880c0309ada3151ac315721bcb0cc75aef3456d0ca61f24c7f3253c2e01fd98daf5e91ece1b56acd64c2d3b219b7e317c30a949c312d095abc69986578c1f9adfd6a8d72bede4dadc0aab3b6fed914c0837db7a3e0e9f3a0949f723af", 0xab}, {&(0x7f0000000280)="103c76a5b2bee0925dfc84067545224e47870ff2c8c0b33069edaedb2a2805093265bfba4386d78244bd0bcf4d4d67ccbd87e7b19ca65493653d505801b1cbc9b21c1da2eab9c075e8cb03b225e6bf8dfed09358d9c6280f9801a66b29a9c763e0db6057ff", 0x65}, {&(0x7f0000000300)="07ce6a8ef84bb6947ecc937ae1fd706fa5555ccdcd40788aa17ccc6aac56aee1e4d99aa59bc69424981e78ed80a46dfd03e034fefd12a8a91958883cd8c3c682446d2312b051747c3d6cb8d2bf870a1907fcf814a792e722d43e6e1afa2bad79df3116b17e4072d27bde7a85867659b81c311bd031471ea50232a1b1e446cb7595fe3a677c974b394036773c475880ffcddd655ae4b43f77c63dee1b6b3ad659dd64243479c0dc81263208dda993caac5bc1801d3db9c45faaaf241ef224df4982d2f6ef624ab2d3821fa504ca66351346824a6fb44cdd9390f0e0e5af15b91a5d724c55c3dc23926eecfbb88e8ded4f0f", 0xf1}], 0x3, &(0x7f0000000440)=[@cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x2c}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000500)="618ee8d09be1433f52a53a64f78be79ccdffe645806fffa4ce397bba4073ba89ac6cda565427e17624069832b27d65040fb1c67bbf3eb425f5dd6e280b7a271fe6fee02d48ede84d120b152d474afabcd4a6f994a1e331495d9de1cfe0c0435e115a9b8a5404e47e56a501a926dc003aa1300603b90066121679aa2d3124fe210ab129ee6b0baafac28b5e9d4d02a153367759b6770f50d6f8ff3fa0f988fca2b8bbea409053f8e831c2b98b", 0xac}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="95170702653d0680772a407a30e590387f46e2701fc6ea067d6b7c080a0342f4f82ddae677a536955b61707c756cde55b0b533f135e4a4977848202dcea87752ca9ecab6f16434796bc318ae9d03625c773528f77ce23a595d9ed6031dc1ea3547ba755a049abbe5b7d3403b5cde2022089c37710b02a8f6ea9e16f9b569c9c7a8890f7671bc3f8d3c9c9446e4e3d95e49573d59df4e05a7e1ecec12b1ec673fa5f7630744dcf6c895e17c326df97ae6e51372f54d731c291d431d7cfe341891fa9d66a458105fd59f7a7bdde1f062b796445b06", 0xd4}], 0x3, 0x0, 0x0, 0x40811}}, {{&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)="48f70c6c26cde2019221004f2136118131428aab70911f3f699f9d91b2fcf0fb98380d0588c44df686fe941b06ebfc671cb3128a99d7dff974239d3724d6ba094b49301a5d69ca5ce7cd1543088b1c8d6a84fdaa178a64d1b7b16e61d844c79cffe2f399cba64ee4cc6452179a994fce55ad247715da734a4ab4c70431a876e109765819e16d1068cf67c16620b748b4abaaee25a1091de0f6bb16d459a5", 0x9e}, {&(0x7f0000001840)="f20ee6170e58a22eba6e72f83120cb4019bf8767bcb4a1ac0d9a74bd4122648abe86eff8fcd4bd", 0x27}, {&(0x7f0000001880)="4d672b28ea71b926d46a004bbf562bcc92660afd5c3d74d6a79451f3a6a4fd59ee5ddeedfa136190f7b09350e615fcb2cd600648b36cbf6255d3e8361029ff7f5b78e3a6e0cee0c416200badfc5b2117b7240173cf68636f", 0x58}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="162d1686225d45e1de98a3fde29568f85581b16b45624dee458331b9ab3ab325fa2cc85be708eb207cd9ba17ac6859bcf1dd7912d829032695c73d831902a116ba4a5eb827b909d3a125312c6c3bc704d75286ecc4f8371ec59bc09da50ab83090d5d979969cf3d4bbaaadad7b08d3118548d68f124873868dcb263651ad518ebea2433681719c036e160611352fa3f8f6a4c51b640f1b0470f577ac5af55d15c7006b6f8f9e32a9d5cecc9c89d1f34699f18358b981f39b4ae4fddda7f405c0d9e72512", 0xc4}, {&(0x7f0000001ac0)="39484a1c408fc4299c2a309e2d5cd0bace4a821f4cf278a200e9fe4adef92eb2064b63007a2817faa0ed4b454460d475c0c4d7a8e9f1fd594b308e93d0a57652141839c2f8fc913e23a85d9951f9e41620cb3f428277b9bd07414c8d1d9113454e80678380dbe14c35573cb773cb79282a891b764bc9a959545429eb7e9a9d76faac935b598a04ff08326e5de851fe990247c5c2685043f5d04f2182a1492ec3930693b004a53127469a15d283902101c48c6d190e85c0cf6f11673c6f5ab8975853f21d3dd1eafc20e46cc6bb4c5ce5e74e23dd0b42dea684026dfddffdd22083d4d8b7decd113e11c172ef901099bc", 0xf0}], 0x2, &(0x7f0000001cc0)=[@cred={{0x18, 0x1, 0x2, {r0, r3, r4}}}], 0x18, 0x2800}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="d9b2c71c65c2319747d0eb535e921f8a8139c6392a14ec905903daf29068bfef24e11a264acbbf9efa5b5f9ed52111a33e9dc042aaa27f3ba4dd551c9dbbac2931f5f9a4cc458d97721235158292b84d96b78b9600713e213afec9163649f4804597e0779bebc3a5feb93b4a52018dc803961c0817374d5c3e595621736270ba8c7c417d9d4784c577df7cc14d8a7914995edf2c1f907536407201b76a4224ed74552f860d7f4f4a4609e27dd78959c1d735f1e61f95755de88641cee69beb852d036e78bd4d3d60a9c940186c441b12b2e44f6760f03ba51d2767d273442a281f163c81a7ed661bc0a1c9de32", 0xed}, {&(0x7f0000001e80)="9e415d146d4c9935621134698ddd12b5bd7ba34e402913b964d4", 0x1a}], 0x2, &(0x7f0000001fc0)=[@cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, r11]}}, @rights={{0x10, 0x1, 0x1, [r13]}}], 0x6c, 0x4004050}}], 0x5, 0x90) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x330a2ad7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 08:42:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:40 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:41 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:41 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:41 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() r1 = openat$vimc1(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002200)={0x68af, 0x10001, {0x0}, {}, 0x4, 0x1}) sched_setscheduler(r2, 0x0, &(0x7f0000002240)=0x9) fstat(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x5, &(0x7f0000001c80)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r6, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r8, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) r9 = openat$proc_mixer(0xffffff9c, &(0x7f0000001f00)='/proc/asound/card1/oss_mixer\x00', 0x8002, 0x0) r10 = openat$vga_arbiter(0xffffff9c, &(0x7f0000001f40), 0x8103, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r12, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) r13 = openat$binder_debug(0xffffff9c, &(0x7f0000001f80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f00000001c0)="0e89ede82dd46c2f39f8e1fd0075064201486c221de71ef1722a27d1564e452518aadff710e97fcd6ac8a62328b922ce6753ced8176b7527a311434028546baf02b1dca5c0badeb147010039b36fb880c0309ada3151ac315721bcb0cc75aef3456d0ca61f24c7f3253c2e01fd98daf5e91ece1b56acd64c2d3b219b7e317c30a949c312d095abc69986578c1f9adfd6a8d72bede4dadc0aab3b6fed914c0837db7a3e0e9f3a0949f723af", 0xab}, {&(0x7f0000000280)="103c76a5b2bee0925dfc84067545224e47870ff2c8c0b33069edaedb2a2805093265bfba4386d78244bd0bcf4d4d67ccbd87e7b19ca65493653d505801b1cbc9b21c1da2eab9c075e8cb03b225e6bf8dfed09358d9c6280f9801a66b29a9c763e0db6057ff", 0x65}, {&(0x7f0000000300)="07ce6a8ef84bb6947ecc937ae1fd706fa5555ccdcd40788aa17ccc6aac56aee1e4d99aa59bc69424981e78ed80a46dfd03e034fefd12a8a91958883cd8c3c682446d2312b051747c3d6cb8d2bf870a1907fcf814a792e722d43e6e1afa2bad79df3116b17e4072d27bde7a85867659b81c311bd031471ea50232a1b1e446cb7595fe3a677c974b394036773c475880ffcddd655ae4b43f77c63dee1b6b3ad659dd64243479c0dc81263208dda993caac5bc1801d3db9c45faaaf241ef224df4982d2f6ef624ab2d3821fa504ca66351346824a6fb44cdd9390f0e0e5af15b91a5d724c55c3dc23926eecfbb88e8ded4f0f", 0xf1}], 0x3, &(0x7f0000000440)=[@cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x2c}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000500)="618ee8d09be1433f52a53a64f78be79ccdffe645806fffa4ce397bba4073ba89ac6cda565427e17624069832b27d65040fb1c67bbf3eb425f5dd6e280b7a271fe6fee02d48ede84d120b152d474afabcd4a6f994a1e331495d9de1cfe0c0435e115a9b8a5404e47e56a501a926dc003aa1300603b90066121679aa2d3124fe210ab129ee6b0baafac28b5e9d4d02a153367759b6770f50d6f8ff3fa0f988fca2b8bbea409053f8e831c2b98b", 0xac}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="95170702653d0680772a407a30e590387f46e2701fc6ea067d6b7c080a0342f4f82ddae677a536955b61707c756cde55b0b533f135e4a4977848202dcea87752ca9ecab6f16434796bc318ae9d03625c773528f77ce23a595d9ed6031dc1ea3547ba755a049abbe5b7d3403b5cde2022089c37710b02a8f6ea9e16f9b569c9c7a8890f7671bc3f8d3c9c9446e4e3d95e49573d59df4e05a7e1ecec12b1ec673fa5f7630744dcf6c895e17c326df97ae6e51372f54d731c291d431d7cfe341891fa9d66a458105fd59f7a7bdde1f062b796445b06", 0xd4}], 0x3, 0x0, 0x0, 0x40811}}, {{&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)="48f70c6c26cde2019221004f2136118131428aab70911f3f699f9d91b2fcf0fb98380d0588c44df686fe941b06ebfc671cb3128a99d7dff974239d3724d6ba094b49301a5d69ca5ce7cd1543088b1c8d6a84fdaa178a64d1b7b16e61d844c79cffe2f399cba64ee4cc6452179a994fce55ad247715da734a4ab4c70431a876e109765819e16d1068cf67c16620b748b4abaaee25a1091de0f6bb16d459a5", 0x9e}, {&(0x7f0000001840)="f20ee6170e58a22eba6e72f83120cb4019bf8767bcb4a1ac0d9a74bd4122648abe86eff8fcd4bd", 0x27}, {&(0x7f0000001880)="4d672b28ea71b926d46a004bbf562bcc92660afd5c3d74d6a79451f3a6a4fd59ee5ddeedfa136190f7b09350e615fcb2cd600648b36cbf6255d3e8361029ff7f5b78e3a6e0cee0c416200badfc5b2117b7240173cf68636f", 0x58}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="162d1686225d45e1de98a3fde29568f85581b16b45624dee458331b9ab3ab325fa2cc85be708eb207cd9ba17ac6859bcf1dd7912d829032695c73d831902a116ba4a5eb827b909d3a125312c6c3bc704d75286ecc4f8371ec59bc09da50ab83090d5d979969cf3d4bbaaadad7b08d3118548d68f124873868dcb263651ad518ebea2433681719c036e160611352fa3f8f6a4c51b640f1b0470f577ac5af55d15c7006b6f8f9e32a9d5cecc9c89d1f34699f18358b981f39b4ae4fddda7f405c0d9e72512", 0xc4}, {&(0x7f0000001ac0)="39484a1c408fc4299c2a309e2d5cd0bace4a821f4cf278a200e9fe4adef92eb2064b63007a2817faa0ed4b454460d475c0c4d7a8e9f1fd594b308e93d0a57652141839c2f8fc913e23a85d9951f9e41620cb3f428277b9bd07414c8d1d9113454e80678380dbe14c35573cb773cb79282a891b764bc9a959545429eb7e9a9d76faac935b598a04ff08326e5de851fe990247c5c2685043f5d04f2182a1492ec3930693b004a53127469a15d283902101c48c6d190e85c0cf6f11673c6f5ab8975853f21d3dd1eafc20e46cc6bb4c5ce5e74e23dd0b42dea684026dfddffdd22083d4d8b7decd113e11c172ef901099bc", 0xf0}], 0x2, &(0x7f0000001cc0)=[@cred={{0x18, 0x1, 0x2, {r0, r3, r4}}}], 0x18, 0x2800}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="d9b2c71c65c2319747d0eb535e921f8a8139c6392a14ec905903daf29068bfef24e11a264acbbf9efa5b5f9ed52111a33e9dc042aaa27f3ba4dd551c9dbbac2931f5f9a4cc458d97721235158292b84d96b78b9600713e213afec9163649f4804597e0779bebc3a5feb93b4a52018dc803961c0817374d5c3e595621736270ba8c7c417d9d4784c577df7cc14d8a7914995edf2c1f907536407201b76a4224ed74552f860d7f4f4a4609e27dd78959c1d735f1e61f95755de88641cee69beb852d036e78bd4d3d60a9c940186c441b12b2e44f6760f03ba51d2767d273442a281f163c81a7ed661bc0a1c9de32", 0xed}, {&(0x7f0000001e80)="9e415d146d4c9935621134698ddd12b5bd7ba34e402913b964d4", 0x1a}], 0x2, &(0x7f0000001fc0)=[@cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, r11]}}, @rights={{0x10, 0x1, 0x1, [r13]}}], 0x6c, 0x4004050}}], 0x5, 0x90) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x330a2ad7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 08:42:42 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 604.071032][T16262] dccp_invalid_packet: P.Data Offset(18) too large 08:42:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, 0x0, 0x0, 0x101d0) 08:42:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440), 0x0, 0x101d0) 08:42:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:43 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:45 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x33, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:45 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:45 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x810) 08:42:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x73, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:46 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:46 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:46 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:46 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) getpid() (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:47 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x810) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:47 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:47 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x0) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x24, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x38, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:48 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:48 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f000035e000/0x2000)=nil, 0x2000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$rds(r1, &(0x7f00000062c0)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003600)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)}, {&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x7, &(0x7f0000006080)=[@rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x69}, {&(0x7f0000003640)=""/186, 0xba}, &(0x7f0000004a40)=[{&(0x7f0000003700)=""/100, 0x64}, {&(0x7f0000003780)=""/165, 0xa5}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/32, 0x20}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/249, 0xf9}, {&(0x7f00000049c0)=""/115, 0x73}], 0x7, 0x681f55fa6fb7f519, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x8}, {&(0x7f0000004ac0)=""/144, 0x90}, &(0x7f0000005cc0)=[{&(0x7f0000004b80)=""/158, 0x9e}, {&(0x7f0000004c40)=""/24, 0x18}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/41, 0x29}], 0x4, 0x30, 0x44c}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f0000005d00)=0x1, &(0x7f0000005d40)=0x3, 0x1f, 0x0, 0x100000001, 0x3, 0x60, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, &(0x7f0000005d80)=0x7, &(0x7f0000005dc0), 0x3, 0x2, 0x8001, 0xffffffff7fffffff, 0x51, 0xffffffffffffff09}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x2}, @mask_fadd={0x58, 0x114, 0x8, {{0xda9e, 0x6}, &(0x7f0000005e00)=0x3, &(0x7f0000005e40)=0x1, 0x3, 0xffffffffffffffff, 0x1000000, 0x3, 0x0, 0x4dd8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005e80)=""/173, 0xad}, &(0x7f0000005f40), 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005f80)=""/162, 0xa2}, &(0x7f0000006040)}}], 0x218, 0x20048000}, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0x3f) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006300)={0x308, r3, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) mmap(&(0x7f000058d000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0xae868000) 08:42:48 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x810) 08:42:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local={0xac, 0x38}}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:48 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:48 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local={0xac, 0x14, 0x38}}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 611.329408][T16366] tipc: Enabling of bearer rejected, failed to enable media 08:42:50 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f000035e000/0x2000)=nil, 0x2000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$rds(r1, &(0x7f00000062c0)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003600)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)}, {&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x7, &(0x7f0000006080)=[@rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x69}, {&(0x7f0000003640)=""/186, 0xba}, &(0x7f0000004a40)=[{&(0x7f0000003700)=""/100, 0x64}, {&(0x7f0000003780)=""/165, 0xa5}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/32, 0x20}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/249, 0xf9}, {&(0x7f00000049c0)=""/115, 0x73}], 0x7, 0x681f55fa6fb7f519, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x8}, {&(0x7f0000004ac0)=""/144, 0x90}, &(0x7f0000005cc0)=[{&(0x7f0000004b80)=""/158, 0x9e}, {&(0x7f0000004c40)=""/24, 0x18}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/41, 0x29}], 0x4, 0x30, 0x44c}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f0000005d00)=0x1, &(0x7f0000005d40)=0x3, 0x1f, 0x0, 0x100000001, 0x3, 0x60, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, &(0x7f0000005d80)=0x7, &(0x7f0000005dc0), 0x3, 0x2, 0x8001, 0xffffffff7fffffff, 0x51, 0xffffffffffffff09}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x2}, @mask_fadd={0x58, 0x114, 0x8, {{0xda9e, 0x6}, &(0x7f0000005e00)=0x3, &(0x7f0000005e40)=0x1, 0x3, 0xffffffffffffffff, 0x1000000, 0x3, 0x0, 0x4dd8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005e80)=""/173, 0xad}, &(0x7f0000005f40), 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005f80)=""/162, 0xa2}, &(0x7f0000006040)}}], 0x218, 0x20048000}, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0x3f) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006300)={0x308, r3, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) mmap(&(0x7f000058d000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0xae868000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) madvise(&(0x7f000035e000/0x2000)=nil, 0x2000, 0x0) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async) sendmsg$rds(r1, &(0x7f00000062c0)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003600)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)}, {&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x7, &(0x7f0000006080)=[@rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x69}, {&(0x7f0000003640)=""/186, 0xba}, &(0x7f0000004a40)=[{&(0x7f0000003700)=""/100, 0x64}, {&(0x7f0000003780)=""/165, 0xa5}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/32, 0x20}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/249, 0xf9}, {&(0x7f00000049c0)=""/115, 0x73}], 0x7, 0x681f55fa6fb7f519, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x8}, {&(0x7f0000004ac0)=""/144, 0x90}, &(0x7f0000005cc0)=[{&(0x7f0000004b80)=""/158, 0x9e}, {&(0x7f0000004c40)=""/24, 0x18}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/41, 0x29}], 0x4, 0x30, 0x44c}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f0000005d00)=0x1, &(0x7f0000005d40)=0x3, 0x1f, 0x0, 0x100000001, 0x3, 0x60, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, &(0x7f0000005d80)=0x7, &(0x7f0000005dc0), 0x3, 0x2, 0x8001, 0xffffffff7fffffff, 0x51, 0xffffffffffffff09}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x2}, @mask_fadd={0x58, 0x114, 0x8, {{0xda9e, 0x6}, &(0x7f0000005e00)=0x3, &(0x7f0000005e40)=0x1, 0x3, 0xffffffffffffffff, 0x1000000, 0x3, 0x0, 0x4dd8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005e80)=""/173, 0xad}, &(0x7f0000005f40), 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005f80)=""/162, 0xa2}, &(0x7f0000006040)}}], 0x218, 0x20048000}, 0x4840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0x3f) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006300)={0x308, r3, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) mmap(&(0x7f000058d000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0xae868000) (async) 08:42:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:50 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaa"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:50 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x6, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:51 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x7, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:51 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x8, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 613.375061][T16387] tipc: Enabling of bearer rejected, failed to enable media 08:42:51 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0xf000, 0x0) 08:42:51 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x9, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:53 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) madvise(&(0x7f000035e000/0x2000)=nil, 0x2000, 0x0) (rerun: 32) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$rds(r1, &(0x7f00000062c0)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003600)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000280)}, {&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x7, &(0x7f0000006080)=[@rdma_args={0x48, 0x114, 0x1, {{0x1ff, 0x69}, {&(0x7f0000003640)=""/186, 0xba}, &(0x7f0000004a40)=[{&(0x7f0000003700)=""/100, 0x64}, {&(0x7f0000003780)=""/165, 0xa5}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/32, 0x20}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/249, 0xf9}, {&(0x7f00000049c0)=""/115, 0x73}], 0x7, 0x681f55fa6fb7f519, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x8}, {&(0x7f0000004ac0)=""/144, 0x90}, &(0x7f0000005cc0)=[{&(0x7f0000004b80)=""/158, 0x9e}, {&(0x7f0000004c40)=""/24, 0x18}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/41, 0x29}], 0x4, 0x30, 0x44c}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x2}, &(0x7f0000005d00)=0x1, &(0x7f0000005d40)=0x3, 0x1f, 0x0, 0x100000001, 0x3, 0x60, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x9}, &(0x7f0000005d80)=0x7, &(0x7f0000005dc0), 0x3, 0x2, 0x8001, 0xffffffff7fffffff, 0x51, 0xffffffffffffff09}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x2}, @mask_fadd={0x58, 0x114, 0x8, {{0xda9e, 0x6}, &(0x7f0000005e00)=0x3, &(0x7f0000005e40)=0x1, 0x3, 0xffffffffffffffff, 0x1000000, 0x3, 0x0, 0x4dd8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005e80)=""/173, 0xad}, &(0x7f0000005f40), 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000005f80)=""/162, 0xa2}, &(0x7f0000006040)}}], 0x218, 0x20048000}, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0x3f) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006300)={0x308, r3, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async, rerun: 64) mmap(&(0x7f000058d000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0xae868000) 08:42:53 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaa"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:53 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:53 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x12, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2a, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:56 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:56 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = timerfd_create(0x72f36d4b1b97356f, 0x80000) ftruncate(r0, 0x8) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltaction={0x8c, 0x31, 0x610, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf706}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x8c}}, 0x10000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r1, 0x12) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x108, 0x4, 0x7a, 0x37a, 0x58, 0x50, 0x161, 0x1}, "ec036b9036612edcf26141a1a7272aec6f6ddef2522a2fa00163e59858afee9068abe30f21eef81c2ca796a0e139a5577768dafeb5eaf1a463fe08975d03fb2743a52fd360249abc5f00fe861aab7bce12e14e6f59e9025c7e3da5b2904fb4e8c29370c9fbf917ea4d700a8c65a44077ace6996398d936970f8cc051bfb25c653c3695ee1b538509b706ca3e95a60bd5fae6d38b3d90295be34c2b92fb8472f34bdd00cc026df6b2859d3b4e06251e"}, 0xcf) 08:42:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x2, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:56 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaa"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:56 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:42:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:57 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:57 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x5, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:57 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x6, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:42:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x7, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:58 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x8, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0xb, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:59 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = timerfd_create(0x72f36d4b1b97356f, 0x80000) ftruncate(r0, 0x8) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltaction={0x8c, 0x31, 0x610, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf706}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x8c}}, 0x10000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r1, 0x12) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x108, 0x4, 0x7a, 0x37a, 0x58, 0x50, 0x161, 0x1}, "ec036b9036612edcf26141a1a7272aec6f6ddef2522a2fa00163e59858afee9068abe30f21eef81c2ca796a0e139a5577768dafeb5eaf1a463fe08975d03fb2743a52fd360249abc5f00fe861aab7bce12e14e6f59e9025c7e3da5b2904fb4e8c29370c9fbf917ea4d700a8c65a44077ace6996398d936970f8cc051bfb25c653c3695ee1b538509b706ca3e95a60bd5fae6d38b3d90295be34c2b92fb8472f34bdd00cc026df6b2859d3b4e06251e"}, 0xcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) timerfd_create(0x72f36d4b1b97356f, 0x80000) (async) ftruncate(r0, 0x8) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) getpid() (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltaction={0x8c, 0x31, 0x610, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf706}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x8c}}, 0x10000010) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) (async) fcntl$dupfd(r2, 0x0, r3) (async) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000400)=r1, 0x12) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x108, 0x4, 0x7a, 0x37a, 0x58, 0x50, 0x161, 0x1}, "ec036b9036612edcf26141a1a7272aec6f6ddef2522a2fa00163e59858afee9068abe30f21eef81c2ca796a0e139a5577768dafeb5eaf1a463fe08975d03fb2743a52fd360249abc5f00fe861aab7bce12e14e6f59e9025c7e3da5b2904fb4e8c29370c9fbf917ea4d700a8c65a44077ace6996398d936970f8cc051bfb25c653c3695ee1b538509b706ca3e95a60bd5fae6d38b3d90295be34c2b92fb8472f34bdd00cc026df6b2859d3b4e06251e"}, 0xcf) (async) 08:42:59 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x7, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:42:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d8"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:42:59 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x24, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:00 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x38, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:01 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x3, 0x0) 08:43:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x2, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x3, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:02 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = timerfd_create(0x72f36d4b1b97356f, 0x80000) ftruncate(r0, 0x8) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltaction={0x8c, 0x31, 0x610, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf706}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x8c}}, 0x10000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) (async) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000400)=r1, 0x12) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x108, 0x4, 0x7a, 0x37a, 0x58, 0x50, 0x161, 0x1}, "ec036b9036612edcf26141a1a7272aec6f6ddef2522a2fa00163e59858afee9068abe30f21eef81c2ca796a0e139a5577768dafeb5eaf1a463fe08975d03fb2743a52fd360249abc5f00fe861aab7bce12e14e6f59e9025c7e3da5b2904fb4e8c29370c9fbf917ea4d700a8c65a44077ace6996398d936970f8cc051bfb25c653c3695ee1b538509b706ca3e95a60bd5fae6d38b3d90295be34c2b92fb8472f34bdd00cc026df6b2859d3b4e06251e"}, 0xcf) 08:43:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x4, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d8"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 624.620836][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.627546][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:43:03 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x5, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:03 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x2, 0x0) 08:43:03 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x7, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x8, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0xb, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:04 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x15}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}, @register_looper, @register_looper], 0x1000, 0x0, &(0x7f00000002c0)="d7753ac7434924db4b47d788cd30062c0bf91be8166db473aa20e1e4c47b3d0a877887bef791d6d3f0e19e157ea0c63448c6a9f19f7e3545e86e5c99832467c46c3a5685e8b8629fba8bb3ece8a7cac6842657197f2278582d0196449535a5a0a52eee0de00a1f235909592a3dd902d58737e598941aa6338792005c280e8b800e471ea97ffdcc33bbeed6ae8b5eb776d3ec82a567bdda10f1d09dbefc5cead63ef4bb58eeb450326acc8f24a5bc191f791ebd5e40ade5d89315c958dbda6eece0d201b449b5e390b108dd7ea07a7dbe9e213e509f797775694c342c6e851ca4d3aa921db0aed9848ea86947ca49982e5b233ae71be46c3f3f9c771fc9d4cf9c6a69c49483709f7ffcf4845925b40f41a085f2c005bed122b1eb90cb742187fcdde3c29cfde37633da89e75e55807f1ce618b941d4240e880c595f117c04940c896c4c1f27dc15eee751ce38a84a2450bca34a415f1fce0adf564c0afc453bc714cdcc980a9f8cb333a8d0ec090d7fac51ac84fb50ef2163dba4829ce9e1e491524d0c096108a90b4290bc7bdf3b0a07c86cdeb5374b025bbd8ebce271022149be83cf55e9fc35c0675ee05d970ab0cfb0baef070f3ddcb6c91c67381f7dd87065bc65afb7fe8ffa9f9342d77bf901945bf1e76ba183d310e2173017dd2eaf921b71eaa8cc0abec8573e46c40f20d541088efc9593d3977e2c8278046fe0a4652243b52bc93dc19c93a8fa32f948a002fe9ac4d59369c280a341a1e5c1b65bd48e5d50d423faca53e4eeb50a30bb3579a511239f210f41c40cba8ed39fc4f079d62097d48573dec6fdcc4362643f849c12aa48d6493ca1d379b85eca8a706cfcc5f66a8e8b84fb1a51b7de1a3b027147c02fb6e305be1337d4158d946746170625d86a7b8c27c2124479b9013cb0162d57fc3fab88974e917a9e293fa047ff76411ef2c76d9aebbce6717ba5893bc9a670159c4e77625563c1fda375923caa56fe9ec7d0112e6135bf2246a51222525fa84b54faca5d31178d9ff06be5067a10dc799b66696eb78ffeb9c5bb7694a4837f9d175165a61ab099f4fc4220f9f71336c3e6ea49e305024bbba61dc189ff1e83dfa1f5d9af1655b25d00d50c673480d5004f0e8a77fa748980c042603f74f9f5ccadf04e9b70349f191b24904d5f0923372ed44dfa93d06c7602591c37f34c9d1107b2b9f1b21e6375eb0d3633dbef05d63fcc46e9bb9ec7fe12847e9ab20c81b7b6704c5ca7ad06e182523bc3fe4f2a83ccb4c77cf2eec0bb73e214e763fd1ede193e9f9bafcf6ba48b3605d1bca099a41c66889d8535e249d7d18ac497bc198c5f52e73ca4ca13337c77eac403dd733daea7ee0316890c91eaac8211e9fc02829a18bf33913dd941be2f86f6b4a5adb554b503736974a7491ad0a6ef0d427dbb2ed2b26bc9751dba9b36be98de63064ff2014d9a66810f7951944cd1c9a7ce26cbf5282699ce1eb2f3c69b99fa65dae98f58f469aab5e9f5347bcf0efb9072bc6bf1925e87dd8bb9989d700fd18f6adf7479fa0d63c772e6dd2a44658f689720cdc1a7e579bf52e57a7239c19d158f523dd1f07b8d46c65da7e555d735da8acaacd33509695edf69e4d43ad96f4069d18bda6b17af8c9cbbecb30e713ca4604e22edc30941ffa84f8f13a70560391db5b39eb27e62ad9bae07ef758a6dce4be27a65a22a70ffee41146242f6c05cb2841aebd6e257f681f14db87a5c0cc40d2a20b466023aea9e992651f29a170ed56cfe273f8246d6b69343fbdf9c230ca1ec60dc4c5105e412d088ba18a6664f606f829c6c9d28b0e798602571883e4e79a39d6a63a3fe287fb2efe3d0f727c74695f6dd23895b59f1645805e9eef9a2b02ee45ab625803754da601a82491fd8090d23d55f49ed859650750e311592512d8231d92015befdbb6f28fe243c79c52c7e0b17a5ade7c47bf9033cfb39df21f53148168006d140a4c733b34c8a580adad9d9374a2f7ef3df9fab4413aed3640c17c1da75db4c4fa5b7df7c006e7b60db8e2270e857d9ad75aaa9ac4a9a51fd4b25686d90659cc52287bc3e22517973a58aaec14e5ec837fe01c593fcf403421369f567477e905dd70444897b79ab3647d9dfe83059f0fba6127c3b39569736edeeab9dc2ef51b17b42c948cc9c3cbdb0be53e97ad287e82deaa2137faf627fdcc0c26ad911673be3640f4aea7565b28c274b8c6e792c0aba695e72f5baf42a49e0aeb610b5c6359baf94defc9d93a65705e4e7cd209927806fab060a8f8b9c9338e0d54028bf0a40328733a6107899a020837f748796cd760c0375cfede347ebf773333d3e7c06776ec09ed5f69fb90a848a3c7f2abbba35d84302c2471acac746cb6b95d10d09ac773d1c54e53d3d448190bce8d9a3be3583e124e28fd61280a950ca5562172c93f01ce36de8b0e15088f659e81eab6323c96c1115582c033e525de3cab8bca8a1e2d6ff6c6c356d149f44607ef70a2c19c4b753fbb71d0c8569c7a2f17158994b352523409990b5eca18d5d1c259cec6082313ed23a6b879f2a23f513ead27629424ce40a400c1504f6ab994d3007e92d311c8aa6f63973dcacdcb18ea964caa3e0bb510c0dc8c9974708ee39578b7dc8deaa747b1fa93593b8e23139d304acf7092ac3ac70deec0c16d44d7268d8a6a3a057f8bbe55ff23d3e8ae62273af167f66f0d46df7b52adde2d597bd99976d6bd074a98dce994fe8efde4061ff62109595f3c54be11f24d7ea1b2ab58256a35a21866f31e7366ac0765bb0d1a6d65e2e5e8106615b5403918bc0f5783d279226962c181d4d09a512989e7760b95e4f2b567db89c6d6306dd1789a81348ab9c474c27e9ad3fd14284d67ab93ccb47b0e3f941b7c17617f89aa8dab0faca1fce44f5e16fbd9297dbdb550e1ec2b9ebbf731cc053904cae11124deb7253dc22d078eed549d90e831f7ef95ef317dd8ddfee71ba9703522d804dbc940c0b7fa50bdc201bf4a8a443b6b742e5cbdd8a0907bf91267711b8dd59f4e6a25c03c0bb32979a1da9720ef0baacce80ae5edaa4bc0bb3eb426e2197eb1a88caf8604e7d6980ded8e58e6121ff0b8b98e64c84cf331d00ae70462075f155ccd7ac60fb27e280409cfd55d77eb35db7c05c52748d97d6e1552d7fa980d78a43f5d03868744d6b32d450f445a240fb04bffe34f4449f01e635020fbc06142a9cd41ea21c7493286e593f00b6382a4da8821e792052581384687bcfeb7d15c315926392df8a7d33c51d2347988898a2eb72301212f7b2bf61d94f586d73e763d1aef73c6e1c0f88e02ed6acbc50ec637031b62b1084c3b34eee42b50e7b97bfc25addeb220aa6a4a5c4b54f205eb2ea145e857e6318f04001435c8e38592f5745a002f07a776989f1d0f9b17d407c8418dcb646d636e474e37f27ea7f24f5b15867cdde66c4d1ed273d9238a7947497f63a58a1c518214a3b30e5f2572ab846137ad13dd8019711c7752a90ef5609aa37fe108065a81febaa03486e34c38ac9320433c52b1b30372eda1012de9cbd15152a1743e77ef4b35b074147a96f8022d09c7d97cc61af6f768fc2d0a80cef0309dd361e042c09291c34a42120db101469d238a1d0c4ac7a99f39a6205563d8c1fc66309693db8dbb4cc7f7f9b9b1a2462e1ea6e39a41d49ec7af69c6113867f02490fb19abe47660698ca440fc32d03ec1845ffd7adcc10da379c818651006d3a7c96a832d2eda0e55d862c6719f95ac5c559509d325ce6227101ef25133585656363bbdc39eb864a4560455f8e53ca6f8a309268a6aed3492d59356d9fa3ef104b7fab6b46b243a8bf40e46628e2302c0345d746d0f5416630d889350de2fb2cde585c46dfc129373f86e36d494bef4c9301d03b983fb9085476575eee70594ae0630d69e826e323704832aac9b646df0e8b66c051ffd38b4096a369a97a0cbab6e90166ff7eaf1de6d6e3469a61bcdab63e3145e6ac4ac519897c9fd338c8d5c525ad2e679a8dcfc77344e3dde18181effecc7eb6a9ebaf05c0c421db961fe36115dfb2d8a6037eee89b3a3763d225321eb2b252ee7b6bf4598817c3910d6860b92655130c05078560687ff9c1416009d0f7632af05b3bd08a41eb5ffbbe4cdf5d76b4750f1bdbf71c96f630c7706345ca0d2d8ebc2cbb521f11c954cf2c4fc25b641162c59fcc18be367b1045e6649ed36a1b512ea58075e0f60431912f78fb281a9f03710f785c3be10e36565289b2ecfd2d4b069b2fa30f10423eacd63cc02d9d807200c2339303ef57b53a0c8c117becad23ad54e21b5a9efc71e61ac8138b0507fe29c3a037033eecd22ef8d868cf3c103fe1046244877c53a4f4498baea36a3da65d2564d0d88bd402a9d6acd088b51c95f9fc967e0d951e0a1f2f6ab9932e64a726904f2f14c6a33a2fe66bb60f8e24161471c9341bf32c0927a47ff8a40ef572f5703ea6466b95d8c4e79a9bfad622afdaa5a4413b90cdd3d2934dc63a779b4eb8bb97f3c8740bacf241ec5b86311106499dd37b60e2b82e98b794f430d3a901f51c8647f6500dfc350dfdc41248eeee23c34345d0d6ab8b17299e2e0956973a3b2cfb58e8a767a3c73d8bce9031fdb4c1e336886b2e32418ebca8cffeaab0cc036b4f75a76519277b53deefc95427eb6f356509265ac951f42b01440c32a10847d7d0d619a1017a94f8eb0c610f6207424026bdcfa69fbb01d1c6cdee939a1c5284886ab2be50f853f912bbbbb713b191edbabc465e6acb083e74a3015f439f043c33aaf12831b96e7d2043700f3374945f5458994b613adaeb81da4625fe1bf116503692406cc214e54fd3dbc86d604791c1d74e0068c9555233fce6cdbcac58b7a21b7579ceabfbfab23db2f252f5dd63abe4001a91c51ee077fdb9715e9b66818ccc169b1a1c00bdf9b3b6e336877d6100efc01e23af099d7ea6fa776beaf33b58a3be50d06cdc77236f256c719795670d85aac3f76352141cd93544a6fcd0adda532f515f09b1f1f272cd1c296cf8bebd5e9770c9d853bb162a43eab6ed8b3b5e234fa17b1f4858c9d4ae2783cfadc85dc1cc2de292aa0de413170002e316ca9c529ecddce60d8b94b3bb1bee90b77227977af4fd0dce80b930594c291483c580beabae13a4d7944fe09fbe82f0e3e6478e39fd9a27c43690ab4877fd5d4844966797761d8033b34451066655df20636ae7a2f5f5511ba083f33e196eba95bc72aa53220302900222cca20363b6a8ef35afb09373edcb56b4456c17a989962c92b0baa344b1ab8a96878bdd87731d2fb5a8bf329441b070b6adb2bc662c07bc07475b65e6f886a429697d2d174680a78c84448c24b3001a4d6dd6b0bb3a433d6ad609b670e9a54e7f931a564af09aa4293b35e78fe7c156e62356661e2e797ef6b3ae956cfee6418f287322c8eab0de712f09eb3c8238d676c33b4561befca921366933c1b9d025dc744504b4d4c65d52f770d10f5b92b64b835e7bd7e20bf6f7cefc842c68519d60828481378859f8dea71964f007dfd8d85c1330b6cad8c4cc613f3b783f10af3301baba8f4fad6ef2560e27212f61fa7132f4a082a853a8de1d95f3ee495a2e6c4fba51daf0a84068c8f8cded1b3104b5342bf59267e2dc8a36d7f24cd25aebaa24549f9c4dd8fa852bfc2bde1fad3d54ecbd79f988997d5657f92c04b92700549266101cadcdc9835547b42f4c4aca91103739d97ffe22c301fe132810adb258006039a6889dff216ae0ab7b8fca2d3c291468e1b18227703fd6500380a5c"}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000140)=0x4) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x24, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x38, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:05 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d8"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 627.547175][T16554] tipc: Enabling of bearer rejected, failed to enable media 08:43:06 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x15}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}, @register_looper, @register_looper], 0x1000, 0x0, &(0x7f00000002c0)="d7753ac7434924db4b47d788cd30062c0bf91be8166db473aa20e1e4c47b3d0a877887bef791d6d3f0e19e157ea0c63448c6a9f19f7e3545e86e5c99832467c46c3a5685e8b8629fba8bb3ece8a7cac6842657197f2278582d0196449535a5a0a52eee0de00a1f235909592a3dd902d58737e598941aa6338792005c280e8b800e471ea97ffdcc33bbeed6ae8b5eb776d3ec82a567bdda10f1d09dbefc5cead63ef4bb58eeb450326acc8f24a5bc191f791ebd5e40ade5d89315c958dbda6eece0d201b449b5e390b108dd7ea07a7dbe9e213e509f797775694c342c6e851ca4d3aa921db0aed9848ea86947ca49982e5b233ae71be46c3f3f9c771fc9d4cf9c6a69c49483709f7ffcf4845925b40f41a085f2c005bed122b1eb90cb742187fcdde3c29cfde37633da89e75e55807f1ce618b941d4240e880c595f117c04940c896c4c1f27dc15eee751ce38a84a2450bca34a415f1fce0adf564c0afc453bc714cdcc980a9f8cb333a8d0ec090d7fac51ac84fb50ef2163dba4829ce9e1e491524d0c096108a90b4290bc7bdf3b0a07c86cdeb5374b025bbd8ebce271022149be83cf55e9fc35c0675ee05d970ab0cfb0baef070f3ddcb6c91c67381f7dd87065bc65afb7fe8ffa9f9342d77bf901945bf1e76ba183d310e2173017dd2eaf921b71eaa8cc0abec8573e46c40f20d541088efc9593d3977e2c8278046fe0a4652243b52bc93dc19c93a8fa32f948a002fe9ac4d59369c280a341a1e5c1b65bd48e5d50d423faca53e4eeb50a30bb3579a511239f210f41c40cba8ed39fc4f079d62097d48573dec6fdcc4362643f849c12aa48d6493ca1d379b85eca8a706cfcc5f66a8e8b84fb1a51b7de1a3b027147c02fb6e305be1337d4158d946746170625d86a7b8c27c2124479b9013cb0162d57fc3fab88974e917a9e293fa047ff76411ef2c76d9aebbce6717ba5893bc9a670159c4e77625563c1fda375923caa56fe9ec7d0112e6135bf2246a51222525fa84b54faca5d31178d9ff06be5067a10dc799b66696eb78ffeb9c5bb7694a4837f9d175165a61ab099f4fc4220f9f71336c3e6ea49e305024bbba61dc189ff1e83dfa1f5d9af1655b25d00d50c673480d5004f0e8a77fa748980c042603f74f9f5ccadf04e9b70349f191b24904d5f0923372ed44dfa93d06c7602591c37f34c9d1107b2b9f1b21e6375eb0d3633dbef05d63fcc46e9bb9ec7fe12847e9ab20c81b7b6704c5ca7ad06e182523bc3fe4f2a83ccb4c77cf2eec0bb73e214e763fd1ede193e9f9bafcf6ba48b3605d1bca099a41c66889d8535e249d7d18ac497bc198c5f52e73ca4ca13337c77eac403dd733daea7ee0316890c91eaac8211e9fc02829a18bf33913dd941be2f86f6b4a5adb554b503736974a7491ad0a6ef0d427dbb2ed2b26bc9751dba9b36be98de63064ff2014d9a66810f7951944cd1c9a7ce26cbf5282699ce1eb2f3c69b99fa65dae98f58f469aab5e9f5347bcf0efb9072bc6bf1925e87dd8bb9989d700fd18f6adf7479fa0d63c772e6dd2a44658f689720cdc1a7e579bf52e57a7239c19d158f523dd1f07b8d46c65da7e555d735da8acaacd33509695edf69e4d43ad96f4069d18bda6b17af8c9cbbecb30e713ca4604e22edc30941ffa84f8f13a70560391db5b39eb27e62ad9bae07ef758a6dce4be27a65a22a70ffee41146242f6c05cb2841aebd6e257f681f14db87a5c0cc40d2a20b466023aea9e992651f29a170ed56cfe273f8246d6b69343fbdf9c230ca1ec60dc4c5105e412d088ba18a6664f606f829c6c9d28b0e798602571883e4e79a39d6a63a3fe287fb2efe3d0f727c74695f6dd23895b59f1645805e9eef9a2b02ee45ab625803754da601a82491fd8090d23d55f49ed859650750e311592512d8231d92015befdbb6f28fe243c79c52c7e0b17a5ade7c47bf9033cfb39df21f53148168006d140a4c733b34c8a580adad9d9374a2f7ef3df9fab4413aed3640c17c1da75db4c4fa5b7df7c006e7b60db8e2270e857d9ad75aaa9ac4a9a51fd4b25686d90659cc52287bc3e22517973a58aaec14e5ec837fe01c593fcf403421369f567477e905dd70444897b79ab3647d9dfe83059f0fba6127c3b39569736edeeab9dc2ef51b17b42c948cc9c3cbdb0be53e97ad287e82deaa2137faf627fdcc0c26ad911673be3640f4aea7565b28c274b8c6e792c0aba695e72f5baf42a49e0aeb610b5c6359baf94defc9d93a65705e4e7cd209927806fab060a8f8b9c9338e0d54028bf0a40328733a6107899a020837f748796cd760c0375cfede347ebf773333d3e7c06776ec09ed5f69fb90a848a3c7f2abbba35d84302c2471acac746cb6b95d10d09ac773d1c54e53d3d448190bce8d9a3be3583e124e28fd61280a950ca5562172c93f01ce36de8b0e15088f659e81eab6323c96c1115582c033e525de3cab8bca8a1e2d6ff6c6c356d149f44607ef70a2c19c4b753fbb71d0c8569c7a2f17158994b352523409990b5eca18d5d1c259cec6082313ed23a6b879f2a23f513ead27629424ce40a400c1504f6ab994d3007e92d311c8aa6f63973dcacdcb18ea964caa3e0bb510c0dc8c9974708ee39578b7dc8deaa747b1fa93593b8e23139d304acf7092ac3ac70deec0c16d44d7268d8a6a3a057f8bbe55ff23d3e8ae62273af167f66f0d46df7b52adde2d597bd99976d6bd074a98dce994fe8efde4061ff62109595f3c54be11f24d7ea1b2ab58256a35a21866f31e7366ac0765bb0d1a6d65e2e5e8106615b5403918bc0f5783d279226962c181d4d09a512989e7760b95e4f2b567db89c6d6306dd1789a81348ab9c474c27e9ad3fd14284d67ab93ccb47b0e3f941b7c17617f89aa8dab0faca1fce44f5e16fbd9297dbdb550e1ec2b9ebbf731cc053904cae11124deb7253dc22d078eed549d90e831f7ef95ef317dd8ddfee71ba9703522d804dbc940c0b7fa50bdc201bf4a8a443b6b742e5cbdd8a0907bf91267711b8dd59f4e6a25c03c0bb32979a1da9720ef0baacce80ae5edaa4bc0bb3eb426e2197eb1a88caf8604e7d6980ded8e58e6121ff0b8b98e64c84cf331d00ae70462075f155ccd7ac60fb27e280409cfd55d77eb35db7c05c52748d97d6e1552d7fa980d78a43f5d03868744d6b32d450f445a240fb04bffe34f4449f01e635020fbc06142a9cd41ea21c7493286e593f00b6382a4da8821e792052581384687bcfeb7d15c315926392df8a7d33c51d2347988898a2eb72301212f7b2bf61d94f586d73e763d1aef73c6e1c0f88e02ed6acbc50ec637031b62b1084c3b34eee42b50e7b97bfc25addeb220aa6a4a5c4b54f205eb2ea145e857e6318f04001435c8e38592f5745a002f07a776989f1d0f9b17d407c8418dcb646d636e474e37f27ea7f24f5b15867cdde66c4d1ed273d9238a7947497f63a58a1c518214a3b30e5f2572ab846137ad13dd8019711c7752a90ef5609aa37fe108065a81febaa03486e34c38ac9320433c52b1b30372eda1012de9cbd15152a1743e77ef4b35b074147a96f8022d09c7d97cc61af6f768fc2d0a80cef0309dd361e042c09291c34a42120db101469d238a1d0c4ac7a99f39a6205563d8c1fc66309693db8dbb4cc7f7f9b9b1a2462e1ea6e39a41d49ec7af69c6113867f02490fb19abe47660698ca440fc32d03ec1845ffd7adcc10da379c818651006d3a7c96a832d2eda0e55d862c6719f95ac5c559509d325ce6227101ef25133585656363bbdc39eb864a4560455f8e53ca6f8a309268a6aed3492d59356d9fa3ef104b7fab6b46b243a8bf40e46628e2302c0345d746d0f5416630d889350de2fb2cde585c46dfc129373f86e36d494bef4c9301d03b983fb9085476575eee70594ae0630d69e826e323704832aac9b646df0e8b66c051ffd38b4096a369a97a0cbab6e90166ff7eaf1de6d6e3469a61bcdab63e3145e6ac4ac519897c9fd338c8d5c525ad2e679a8dcfc77344e3dde18181effecc7eb6a9ebaf05c0c421db961fe36115dfb2d8a6037eee89b3a3763d225321eb2b252ee7b6bf4598817c3910d6860b92655130c05078560687ff9c1416009d0f7632af05b3bd08a41eb5ffbbe4cdf5d76b4750f1bdbf71c96f630c7706345ca0d2d8ebc2cbb521f11c954cf2c4fc25b641162c59fcc18be367b1045e6649ed36a1b512ea58075e0f60431912f78fb281a9f03710f785c3be10e36565289b2ecfd2d4b069b2fa30f10423eacd63cc02d9d807200c2339303ef57b53a0c8c117becad23ad54e21b5a9efc71e61ac8138b0507fe29c3a037033eecd22ef8d868cf3c103fe1046244877c53a4f4498baea36a3da65d2564d0d88bd402a9d6acd088b51c95f9fc967e0d951e0a1f2f6ab9932e64a726904f2f14c6a33a2fe66bb60f8e24161471c9341bf32c0927a47ff8a40ef572f5703ea6466b95d8c4e79a9bfad622afdaa5a4413b90cdd3d2934dc63a779b4eb8bb97f3c8740bacf241ec5b86311106499dd37b60e2b82e98b794f430d3a901f51c8647f6500dfc350dfdc41248eeee23c34345d0d6ab8b17299e2e0956973a3b2cfb58e8a767a3c73d8bce9031fdb4c1e336886b2e32418ebca8cffeaab0cc036b4f75a76519277b53deefc95427eb6f356509265ac951f42b01440c32a10847d7d0d619a1017a94f8eb0c610f6207424026bdcfa69fbb01d1c6cdee939a1c5284886ab2be50f853f912bbbbb713b191edbabc465e6acb083e74a3015f439f043c33aaf12831b96e7d2043700f3374945f5458994b613adaeb81da4625fe1bf116503692406cc214e54fd3dbc86d604791c1d74e0068c9555233fce6cdbcac58b7a21b7579ceabfbfab23db2f252f5dd63abe4001a91c51ee077fdb9715e9b66818ccc169b1a1c00bdf9b3b6e336877d6100efc01e23af099d7ea6fa776beaf33b58a3be50d06cdc77236f256c719795670d85aac3f76352141cd93544a6fcd0adda532f515f09b1f1f272cd1c296cf8bebd5e9770c9d853bb162a43eab6ed8b3b5e234fa17b1f4858c9d4ae2783cfadc85dc1cc2de292aa0de413170002e316ca9c529ecddce60d8b94b3bb1bee90b77227977af4fd0dce80b930594c291483c580beabae13a4d7944fe09fbe82f0e3e6478e39fd9a27c43690ab4877fd5d4844966797761d8033b34451066655df20636ae7a2f5f5511ba083f33e196eba95bc72aa53220302900222cca20363b6a8ef35afb09373edcb56b4456c17a989962c92b0baa344b1ab8a96878bdd87731d2fb5a8bf329441b070b6adb2bc662c07bc07475b65e6f886a429697d2d174680a78c84448c24b3001a4d6dd6b0bb3a433d6ad609b670e9a54e7f931a564af09aa4293b35e78fe7c156e62356661e2e797ef6b3ae956cfee6418f287322c8eab0de712f09eb3c8238d676c33b4561befca921366933c1b9d025dc744504b4d4c65d52f770d10f5b92b64b835e7bd7e20bf6f7cefc842c68519d60828481378859f8dea71964f007dfd8d85c1330b6cad8c4cc613f3b783f10af3301baba8f4fad6ef2560e27212f61fa7132f4a082a853a8de1d95f3ee495a2e6c4fba51daf0a84068c8f8cded1b3104b5342bf59267e2dc8a36d7f24cd25aebaa24549f9c4dd8fa852bfc2bde1fad3d54ecbd79f988997d5657f92c04b92700549266101cadcdc9835547b42f4c4aca91103739d97ffe22c301fe132810adb258006039a6889dff216ae0ab7b8fca2d3c291468e1b18227703fd6500380a5c"}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000140)=0x4) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:06 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:06 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:06 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:06 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x15}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}, @register_looper, @register_looper], 0x1000, 0x0, &(0x7f00000002c0)="d7753ac7434924db4b47d788cd30062c0bf91be8166db473aa20e1e4c47b3d0a877887bef791d6d3f0e19e157ea0c63448c6a9f19f7e3545e86e5c99832467c46c3a5685e8b8629fba8bb3ece8a7cac6842657197f2278582d0196449535a5a0a52eee0de00a1f235909592a3dd902d58737e598941aa6338792005c280e8b800e471ea97ffdcc33bbeed6ae8b5eb776d3ec82a567bdda10f1d09dbefc5cead63ef4bb58eeb450326acc8f24a5bc191f791ebd5e40ade5d89315c958dbda6eece0d201b449b5e390b108dd7ea07a7dbe9e213e509f797775694c342c6e851ca4d3aa921db0aed9848ea86947ca49982e5b233ae71be46c3f3f9c771fc9d4cf9c6a69c49483709f7ffcf4845925b40f41a085f2c005bed122b1eb90cb742187fcdde3c29cfde37633da89e75e55807f1ce618b941d4240e880c595f117c04940c896c4c1f27dc15eee751ce38a84a2450bca34a415f1fce0adf564c0afc453bc714cdcc980a9f8cb333a8d0ec090d7fac51ac84fb50ef2163dba4829ce9e1e491524d0c096108a90b4290bc7bdf3b0a07c86cdeb5374b025bbd8ebce271022149be83cf55e9fc35c0675ee05d970ab0cfb0baef070f3ddcb6c91c67381f7dd87065bc65afb7fe8ffa9f9342d77bf901945bf1e76ba183d310e2173017dd2eaf921b71eaa8cc0abec8573e46c40f20d541088efc9593d3977e2c8278046fe0a4652243b52bc93dc19c93a8fa32f948a002fe9ac4d59369c280a341a1e5c1b65bd48e5d50d423faca53e4eeb50a30bb3579a511239f210f41c40cba8ed39fc4f079d62097d48573dec6fdcc4362643f849c12aa48d6493ca1d379b85eca8a706cfcc5f66a8e8b84fb1a51b7de1a3b027147c02fb6e305be1337d4158d946746170625d86a7b8c27c2124479b9013cb0162d57fc3fab88974e917a9e293fa047ff76411ef2c76d9aebbce6717ba5893bc9a670159c4e77625563c1fda375923caa56fe9ec7d0112e6135bf2246a51222525fa84b54faca5d31178d9ff06be5067a10dc799b66696eb78ffeb9c5bb7694a4837f9d175165a61ab099f4fc4220f9f71336c3e6ea49e305024bbba61dc189ff1e83dfa1f5d9af1655b25d00d50c673480d5004f0e8a77fa748980c042603f74f9f5ccadf04e9b70349f191b24904d5f0923372ed44dfa93d06c7602591c37f34c9d1107b2b9f1b21e6375eb0d3633dbef05d63fcc46e9bb9ec7fe12847e9ab20c81b7b6704c5ca7ad06e182523bc3fe4f2a83ccb4c77cf2eec0bb73e214e763fd1ede193e9f9bafcf6ba48b3605d1bca099a41c66889d8535e249d7d18ac497bc198c5f52e73ca4ca13337c77eac403dd733daea7ee0316890c91eaac8211e9fc02829a18bf33913dd941be2f86f6b4a5adb554b503736974a7491ad0a6ef0d427dbb2ed2b26bc9751dba9b36be98de63064ff2014d9a66810f7951944cd1c9a7ce26cbf5282699ce1eb2f3c69b99fa65dae98f58f469aab5e9f5347bcf0efb9072bc6bf1925e87dd8bb9989d700fd18f6adf7479fa0d63c772e6dd2a44658f689720cdc1a7e579bf52e57a7239c19d158f523dd1f07b8d46c65da7e555d735da8acaacd33509695edf69e4d43ad96f4069d18bda6b17af8c9cbbecb30e713ca4604e22edc30941ffa84f8f13a70560391db5b39eb27e62ad9bae07ef758a6dce4be27a65a22a70ffee41146242f6c05cb2841aebd6e257f681f14db87a5c0cc40d2a20b466023aea9e992651f29a170ed56cfe273f8246d6b69343fbdf9c230ca1ec60dc4c5105e412d088ba18a6664f606f829c6c9d28b0e798602571883e4e79a39d6a63a3fe287fb2efe3d0f727c74695f6dd23895b59f1645805e9eef9a2b02ee45ab625803754da601a82491fd8090d23d55f49ed859650750e311592512d8231d92015befdbb6f28fe243c79c52c7e0b17a5ade7c47bf9033cfb39df21f53148168006d140a4c733b34c8a580adad9d9374a2f7ef3df9fab4413aed3640c17c1da75db4c4fa5b7df7c006e7b60db8e2270e857d9ad75aaa9ac4a9a51fd4b25686d90659cc52287bc3e22517973a58aaec14e5ec837fe01c593fcf403421369f567477e905dd70444897b79ab3647d9dfe83059f0fba6127c3b39569736edeeab9dc2ef51b17b42c948cc9c3cbdb0be53e97ad287e82deaa2137faf627fdcc0c26ad911673be3640f4aea7565b28c274b8c6e792c0aba695e72f5baf42a49e0aeb610b5c6359baf94defc9d93a65705e4e7cd209927806fab060a8f8b9c9338e0d54028bf0a40328733a6107899a020837f748796cd760c0375cfede347ebf773333d3e7c06776ec09ed5f69fb90a848a3c7f2abbba35d84302c2471acac746cb6b95d10d09ac773d1c54e53d3d448190bce8d9a3be3583e124e28fd61280a950ca5562172c93f01ce36de8b0e15088f659e81eab6323c96c1115582c033e525de3cab8bca8a1e2d6ff6c6c356d149f44607ef70a2c19c4b753fbb71d0c8569c7a2f17158994b352523409990b5eca18d5d1c259cec6082313ed23a6b879f2a23f513ead27629424ce40a400c1504f6ab994d3007e92d311c8aa6f63973dcacdcb18ea964caa3e0bb510c0dc8c9974708ee39578b7dc8deaa747b1fa93593b8e23139d304acf7092ac3ac70deec0c16d44d7268d8a6a3a057f8bbe55ff23d3e8ae62273af167f66f0d46df7b52adde2d597bd99976d6bd074a98dce994fe8efde4061ff62109595f3c54be11f24d7ea1b2ab58256a35a21866f31e7366ac0765bb0d1a6d65e2e5e8106615b5403918bc0f5783d279226962c181d4d09a512989e7760b95e4f2b567db89c6d6306dd1789a81348ab9c474c27e9ad3fd14284d67ab93ccb47b0e3f941b7c17617f89aa8dab0faca1fce44f5e16fbd9297dbdb550e1ec2b9ebbf731cc053904cae11124deb7253dc22d078eed549d90e831f7ef95ef317dd8ddfee71ba9703522d804dbc940c0b7fa50bdc201bf4a8a443b6b742e5cbdd8a0907bf91267711b8dd59f4e6a25c03c0bb32979a1da9720ef0baacce80ae5edaa4bc0bb3eb426e2197eb1a88caf8604e7d6980ded8e58e6121ff0b8b98e64c84cf331d00ae70462075f155ccd7ac60fb27e280409cfd55d77eb35db7c05c52748d97d6e1552d7fa980d78a43f5d03868744d6b32d450f445a240fb04bffe34f4449f01e635020fbc06142a9cd41ea21c7493286e593f00b6382a4da8821e792052581384687bcfeb7d15c315926392df8a7d33c51d2347988898a2eb72301212f7b2bf61d94f586d73e763d1aef73c6e1c0f88e02ed6acbc50ec637031b62b1084c3b34eee42b50e7b97bfc25addeb220aa6a4a5c4b54f205eb2ea145e857e6318f04001435c8e38592f5745a002f07a776989f1d0f9b17d407c8418dcb646d636e474e37f27ea7f24f5b15867cdde66c4d1ed273d9238a7947497f63a58a1c518214a3b30e5f2572ab846137ad13dd8019711c7752a90ef5609aa37fe108065a81febaa03486e34c38ac9320433c52b1b30372eda1012de9cbd15152a1743e77ef4b35b074147a96f8022d09c7d97cc61af6f768fc2d0a80cef0309dd361e042c09291c34a42120db101469d238a1d0c4ac7a99f39a6205563d8c1fc66309693db8dbb4cc7f7f9b9b1a2462e1ea6e39a41d49ec7af69c6113867f02490fb19abe47660698ca440fc32d03ec1845ffd7adcc10da379c818651006d3a7c96a832d2eda0e55d862c6719f95ac5c559509d325ce6227101ef25133585656363bbdc39eb864a4560455f8e53ca6f8a309268a6aed3492d59356d9fa3ef104b7fab6b46b243a8bf40e46628e2302c0345d746d0f5416630d889350de2fb2cde585c46dfc129373f86e36d494bef4c9301d03b983fb9085476575eee70594ae0630d69e826e323704832aac9b646df0e8b66c051ffd38b4096a369a97a0cbab6e90166ff7eaf1de6d6e3469a61bcdab63e3145e6ac4ac519897c9fd338c8d5c525ad2e679a8dcfc77344e3dde18181effecc7eb6a9ebaf05c0c421db961fe36115dfb2d8a6037eee89b3a3763d225321eb2b252ee7b6bf4598817c3910d6860b92655130c05078560687ff9c1416009d0f7632af05b3bd08a41eb5ffbbe4cdf5d76b4750f1bdbf71c96f630c7706345ca0d2d8ebc2cbb521f11c954cf2c4fc25b641162c59fcc18be367b1045e6649ed36a1b512ea58075e0f60431912f78fb281a9f03710f785c3be10e36565289b2ecfd2d4b069b2fa30f10423eacd63cc02d9d807200c2339303ef57b53a0c8c117becad23ad54e21b5a9efc71e61ac8138b0507fe29c3a037033eecd22ef8d868cf3c103fe1046244877c53a4f4498baea36a3da65d2564d0d88bd402a9d6acd088b51c95f9fc967e0d951e0a1f2f6ab9932e64a726904f2f14c6a33a2fe66bb60f8e24161471c9341bf32c0927a47ff8a40ef572f5703ea6466b95d8c4e79a9bfad622afdaa5a4413b90cdd3d2934dc63a779b4eb8bb97f3c8740bacf241ec5b86311106499dd37b60e2b82e98b794f430d3a901f51c8647f6500dfc350dfdc41248eeee23c34345d0d6ab8b17299e2e0956973a3b2cfb58e8a767a3c73d8bce9031fdb4c1e336886b2e32418ebca8cffeaab0cc036b4f75a76519277b53deefc95427eb6f356509265ac951f42b01440c32a10847d7d0d619a1017a94f8eb0c610f6207424026bdcfa69fbb01d1c6cdee939a1c5284886ab2be50f853f912bbbbb713b191edbabc465e6acb083e74a3015f439f043c33aaf12831b96e7d2043700f3374945f5458994b613adaeb81da4625fe1bf116503692406cc214e54fd3dbc86d604791c1d74e0068c9555233fce6cdbcac58b7a21b7579ceabfbfab23db2f252f5dd63abe4001a91c51ee077fdb9715e9b66818ccc169b1a1c00bdf9b3b6e336877d6100efc01e23af099d7ea6fa776beaf33b58a3be50d06cdc77236f256c719795670d85aac3f76352141cd93544a6fcd0adda532f515f09b1f1f272cd1c296cf8bebd5e9770c9d853bb162a43eab6ed8b3b5e234fa17b1f4858c9d4ae2783cfadc85dc1cc2de292aa0de413170002e316ca9c529ecddce60d8b94b3bb1bee90b77227977af4fd0dce80b930594c291483c580beabae13a4d7944fe09fbe82f0e3e6478e39fd9a27c43690ab4877fd5d4844966797761d8033b34451066655df20636ae7a2f5f5511ba083f33e196eba95bc72aa53220302900222cca20363b6a8ef35afb09373edcb56b4456c17a989962c92b0baa344b1ab8a96878bdd87731d2fb5a8bf329441b070b6adb2bc662c07bc07475b65e6f886a429697d2d174680a78c84448c24b3001a4d6dd6b0bb3a433d6ad609b670e9a54e7f931a564af09aa4293b35e78fe7c156e62356661e2e797ef6b3ae956cfee6418f287322c8eab0de712f09eb3c8238d676c33b4561befca921366933c1b9d025dc744504b4d4c65d52f770d10f5b92b64b835e7bd7e20bf6f7cefc842c68519d60828481378859f8dea71964f007dfd8d85c1330b6cad8c4cc613f3b783f10af3301baba8f4fad6ef2560e27212f61fa7132f4a082a853a8de1d95f3ee495a2e6c4fba51daf0a84068c8f8cded1b3104b5342bf59267e2dc8a36d7f24cd25aebaa24549f9c4dd8fa852bfc2bde1fad3d54ecbd79f988997d5657f92c04b92700549266101cadcdc9835547b42f4c4aca91103739d97ffe22c301fe132810adb258006039a6889dff216ae0ab7b8fca2d3c291468e1b18227703fd6500380a5c"}) (async, rerun: 64) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000140)=0x4) (rerun: 64) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:06 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:07 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 629.913283][T16582] tipc: Enabling of bearer rejected, failed to enable media 08:43:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:08 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x125}], 0x1, 0x0) 08:43:09 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x15}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}, @register_looper, @register_looper], 0x1000, 0x0, &(0x7f00000002c0)="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"}) (async) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:09 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:10 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:10 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:11 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:12 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:12 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19b803a2c4ec2b5e, &(0x7f0000000000), 0x0, 0x2) mprotect(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x100000b) mremap(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000268000/0x1000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:12 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a970000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:12 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:13 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r4 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:14 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:14 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:14 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:15 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19b803a2c4ec2b5e, &(0x7f0000000000), 0x0, 0x2) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19b803a2c4ec2b5e, &(0x7f0000000000), 0x0, 0x2) mprotect(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x100000b) mremap(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000268000/0x1000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) [ 637.263047][ T5092] Bluetooth: hci3: unexpected event for opcode 0x0804 08:43:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a970000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:16 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19b803a2c4ec2b5e, &(0x7f0000000000), 0x0, 0x2) mprotect(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x100000b) mremap(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000268000/0x1000)=nil) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19b803a2c4ec2b5e, &(0x7f0000000000), 0x0, 0x2) (async) mprotect(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x100000b) (async) mremap(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000268000/0x1000)=nil) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) 08:43:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 639.358208][ T5092] Bluetooth: hci3: command 0x0409 tx timeout 08:43:17 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:17 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:18 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a970000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:19 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 641.331637][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 641.340439][ T5092] Bluetooth: hci3: Injecting HCI hardware error event [ 641.350113][ T5094] Bluetooth: hci3: hardware error 0x00 08:43:19 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:19 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003e2000/0x4000)=nil, 0x4000, 0xf) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f00000000c0)=""/112, 0x75}, {&(0x7f0000000380)=""/233, 0xf4}, {&(0x7f0000000240)=""/111, 0xffffffffffffff5f}], 0x4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/60}], 0x0, 0x0) 08:43:20 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:21 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:21 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 643.401600][ T5094] Bluetooth: hci3: Opcode 0x c03 failed: -110 08:43:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:22 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:22 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00003e2000/0x4000)=nil, 0x4000, 0xf) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f00000000c0)=""/112, 0x75}, {&(0x7f0000000380)=""/233, 0xf4}, {&(0x7f0000000240)=""/111, 0xffffffffffffff5f}], 0x4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/60}], 0x0, 0x0) 08:43:23 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:23 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:24 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:24 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00003e2000/0x4000)=nil, 0x4000, 0xf) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/67, 0x43}, {&(0x7f00000000c0)=""/112, 0x75}, {&(0x7f0000000380)=""/233, 0xf4}, {&(0x7f0000000240)=""/111, 0xffffffffffffff5f}], 0x4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/60}], 0x0, 0x0) 08:43:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:25 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a970000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:25 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, 0x0, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000006}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc020000", @ANYRES32=r0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x54) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/197, 0xc5}], 0x2, 0x5, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) move_pages(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000171000/0x4000)=nil, &(0x7f000090a000/0x2000)=nil, &(0x7f000065f000/0x1000)=nil, &(0x7f0000407000/0x2000)=nil], &(0x7f0000000600)=[0x400000, 0xffff, 0x3f, 0x5, 0x1f, 0x4, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x4) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:26 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0xf000, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:26 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:26 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:26 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, 0x0, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000006}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc020000", @ANYRES32=r0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x54) (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/197, 0xc5}], 0x2, 0x5, 0x1) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) move_pages(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000171000/0x4000)=nil, &(0x7f000090a000/0x2000)=nil, &(0x7f000065f000/0x1000)=nil, &(0x7f0000407000/0x2000)=nil], &(0x7f0000000600)=[0x400000, 0xffff, 0x3f, 0x5, 0x1f, 0x4, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x4) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:27 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0xf000, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:27 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:27 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:27 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:28 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:28 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:28 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:29 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, 0x0, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000006}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, 0x0, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000006}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc020000", @ANYRES32=r0, @ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x54) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/197, 0xc5}], 0x2, 0x5, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) move_pages(r2, 0x4, &(0x7f00000005c0)=[&(0x7f0000171000/0x4000)=nil, &(0x7f000090a000/0x2000)=nil, &(0x7f000065f000/0x1000)=nil, &(0x7f0000407000/0x2000)=nil], &(0x7f0000000600)=[0x400000, 0xffff, 0x3f, 0x5, 0x1f, 0x4, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x4) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:29 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:29 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a97000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:30 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r4, 0x0, r5) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:30 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0xff, 0x1, 0x6f, 0xc4c6]}, 0xc) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:31 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:31 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:31 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:32 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:32 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:34 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:34 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0xff, 0x1, 0x6f, 0xc4c6]}, 0xc) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) getpid() (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80800) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0xff, 0x1, 0x6f, 0xc4c6]}, 0xc) (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) 08:43:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:34 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:34 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:35 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:36 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:37 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:37 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0xff, 0x1, 0x6f, 0xc4c6]}, 0xc) (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:37 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:37 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:37 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:38 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x10, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:38 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:40 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) dup2(0xffffffffffffffff, r0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5f}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) 08:43:40 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:40 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:40 executing program 2: syz_clone(0x5c208000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 08:43:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:43:41 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:41 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080003001a"], 0x1c}}, 0x0) [ 663.851010][T16964] tipc: Enabling of bearer rejected, failed to enable media 08:43:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async, rerun: 32) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) dup2(0xffffffffffffffff, r0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:42 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 665.195073][T16998] tipc: Enabling of bearer rejected, failed to enable media 08:43:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x5, 0x21, @random}]]}, 0x24}}, 0x0) 08:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:43:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:43 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:43:43 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:43 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r1, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) dup2(0xffffffffffffffff, r0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) [ 666.431156][T17021] tipc: Enabling of bearer rejected, failed to enable media 08:43:44 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x1c, r1, 0x103, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @void}}}, 0x1c}}, 0x0) 08:43:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:43:44 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000000)=""/20, 0x14}], 0x2, 0x0) 08:43:44 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:44 executing program 5: r0 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 08:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:43:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0x8001}) 08:43:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:45 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:46 executing program 5: io_setup(0x0, &(0x7f0000000c40)=0x0) io_getevents(r0, 0x98f8, 0x0, 0x0, &(0x7f0000000cc0)) io_setup(0xff, &(0x7f0000000000)=0x0) io_getevents(r1, 0x5e86, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)) syz_clone(0x5c208000, &(0x7f00000000c0)="09bdf39efb6ba78827bd037a10df3b277d43ab97923b3c2e9710d5564f268c83e70a99d5ee6fba42d42888a87af7fa901fabb3f8fa0086121aefe5480f76385548464d0749815833ff30ac3d818643679dc06633750ae41f6b6d5a93684b6fbb66336627a11e9bd743b872ab2eb3083961fc5bf1660dc07184f292db54f2a2e744d10bf0f65f659ae9b4f71f62a85e06a023d82707567c8eb07f46a6f85fc7144d2b847eb56b36724ebcd5de5283fbf0c3537cf3ea5c0f24af824de04e7fefd4a32349f1494be2b3e4c38ca43702ed49fbf237115af36f7a10c79ed1adc7c7ce39", 0xe1, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="250b3a97ba14f51aad4bce34a94b839049850ad16720693aa2b3e9925b83c9c572451be3ed9865975fa2e0518df805c2b105177a7bf62f11042683822cbf2c0b2910b88f71904c56b896b15f065139c45aa8ffe415d336ad7a8b6a12691ed6ce7027541274bbf21f68b6388a4aed2d5a33703442874ce6193a64db29da0ce725c6d13082a7722ef2b0692e7a01fffb9b0cdf999db95566234ed2b6a6c1b00ee4348ec11b6a7f757229d82cb892c7da") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 08:43:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001840)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}}, 0x20}}, 0x0) 08:43:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:46 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:46 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000000)=""/20, 0x14}], 0x2, 0x0) 08:43:46 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}, 0x2d}, 0x0) 08:43:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000350000006400a6800a000600021100000000000a0006000802110000000000000600080211090000000000000000a17f3303000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100001c00a6800a000600ffffffffffff0000d0fe0600ffffffffffff00000800a500010000000800a500000000006d99cf761fe2cf58bee36f7929db566d142bf9acaecd68b7b754baf8d83c60ebbf7c061fa3c17cd66be0c2"], 0xb8}, 0x1, 0x0, 0x0, 0x24008081}, 0x0) [ 668.322225][T17073] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 08:43:46 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:46 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:46 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xacac3488fea28d08, 0x0) 08:43:46 executing program 5: r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 08:43:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 08:43:47 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:49 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:49 executing program 2: setresuid(0xee01, 0xee01, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) 08:43:49 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000000)=""/20, 0x14}], 0x2, 0x0) 08:43:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r3, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:49 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:49 executing program 5: add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='}', 0x1, 0xfffffffffffffffc) 08:43:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:49 executing program 2: r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x4, r1, &(0x7f0000000080)={0x30000005}) 08:43:49 executing program 5: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1e7381) 08:43:49 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x541b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}}) 08:43:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:49 executing program 5: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 08:43:49 executing program 2: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x101682) 08:43:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8) 08:43:50 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x0) 08:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, 0x0, 0x0) 08:43:52 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="53623b39b3540ee9c46dd6e1fa0d4ba4", 0x10) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:52 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:52 executing program 2: setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0xee00) 08:43:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, 0x0, 0x0) 08:43:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 08:43:52 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:52 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8904, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}}) 08:43:53 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80004507, 0x0) 08:43:54 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="53623b39b3540ee9c46dd6e1fa0d4ba4", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="53623b39b3540ee9c46dd6e1fa0d4ba4", 0x10) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:43:54 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:54 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:54 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000080)='X', 0x1}, {0x0}, {&(0x7f00000002c0)="93", 0x1}], 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="98"], 0x98}], 0x1, 0x0) 08:43:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:54 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000b80)={'sit0\x00', 0x0}) 08:43:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x4) 08:43:54 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:55 executing program 2: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) getpid() socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 08:43:55 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 08:43:55 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:56 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd6006806f00440400fe880000000000000034053a499806e683"], 0x0) 08:43:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:56 executing program 2: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) getpid() socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 08:43:56 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="53623b39b3540ee9c46dd6e1fa0d4ba4", 0x10) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000140)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) (async) fcntl$dupfd(r0, 0x0, r1) (async) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="53623b39b3540ee9c46dd6e1fa0d4ba4", 0x10) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) getpid() (async) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) 08:43:56 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x8010aebb, 0x0) 08:43:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:56 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x4040, 0x0) 08:43:56 executing program 2: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) getpid() socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 08:43:56 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:56 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="be6e0ea5fff4", @dev, @val={@void}, {@arp={0x8100, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev, @mcast2, @dev, @rand_addr=' \x01\x00'}}}}, 0x0) 08:43:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:43:59 executing program 5: syz_emit_ethernet(0xbe, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd6006806f004404"], 0x0) 08:43:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:59 executing program 2: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x106, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) getpid() socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 08:43:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x0, r0) r1 = add_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000780)="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", 0x1000, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000640)='big_key\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)="9f719de3aa1e8cb3f4d1f375f266402c9dea038287db920d292dc48f74301d9f6eb501cf71e670fa17e75cef722a7f42343564a80a403db0836664a3e372ab999dafd4b876751e060fd847871d012417eb0225d23020a4662730cc19ad86419a143483afccf19ece83c454662a0181", 0x6f, r1) r3 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$reject(0x13, r2, 0x80000000, 0x8, r3) r4 = request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='$.!\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x20, r3) r5 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='&\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r5, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "d4aabf781591dd08dc637fea3d93a35b32322571f923f660932e87ac90ed52b488d4a9ccb198f313a6449e4e9c16b7d83610c8905167f7bd142c8147ee98439d", 0x1a}, 0x48, r4) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000540)={0x0, "8a90522de57fef2592f0e1d769b02e3125e4a1e255df3bed6a212a8ae7805d1d5419b4aaa582c80c8767dd64b17e7208b2baa4dc37689600bbf062feb5f53d94"}, 0x48, r5) add_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, &(0x7f00000007c0), 0x0, r5) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\xa9\x00', r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000abd000/0x2000)=nil, 0x2000, 0x14) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x0, 0x0) 08:43:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:43:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xac}}, 0x0) 08:43:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x0, r0) r1 = add_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000780)="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", 0x1000, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) (async) add_key(&(0x7f0000000640)='big_key\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)="9f719de3aa1e8cb3f4d1f375f266402c9dea038287db920d292dc48f74301d9f6eb501cf71e670fa17e75cef722a7f42343564a80a403db0836664a3e372ab999dafd4b876751e060fd847871d012417eb0225d23020a4662730cc19ad86419a143483afccf19ece83c454662a0181", 0x6f, r1) r3 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$reject(0x13, r2, 0x80000000, 0x8, r3) (async) r4 = request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='$.!\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x20, r3) (async, rerun: 64) r5 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='&\x00', r2) (rerun: 64) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r5, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "d4aabf781591dd08dc637fea3d93a35b32322571f923f660932e87ac90ed52b488d4a9ccb198f313a6449e4e9c16b7d83610c8905167f7bd142c8147ee98439d", 0x1a}, 0x48, r4) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000540)={0x0, "8a90522de57fef2592f0e1d769b02e3125e4a1e255df3bed6a212a8ae7805d1d5419b4aaa582c80c8767dd64b17e7208b2baa4dc37689600bbf062feb5f53d94"}, 0x48, r5) add_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, &(0x7f00000007c0), 0x0, r5) (async) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\xa9\x00', r5) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000abd000/0x2000)=nil, 0x2000, 0x14) (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x0, 0x0) 08:43:59 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:43:59 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="ab23110400", @link_local, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@rr={0x7, 0x3, 0xd6}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 08:43:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x0, r0) (async) keyctl$negate(0xd, 0x0, 0x0, r0) r1 = add_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000780)="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", 0x1000, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000640)='big_key\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)="9f719de3aa1e8cb3f4d1f375f266402c9dea038287db920d292dc48f74301d9f6eb501cf71e670fa17e75cef722a7f42343564a80a403db0836664a3e372ab999dafd4b876751e060fd847871d012417eb0225d23020a4662730cc19ad86419a143483afccf19ece83c454662a0181", 0x6f, r1) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) (async) r3 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$reject(0x13, r2, 0x80000000, 0x8, r3) r4 = request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='$.!\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x20, r3) r5 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='&\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r5, 0x0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "d4aabf781591dd08dc637fea3d93a35b32322571f923f660932e87ac90ed52b488d4a9ccb198f313a6449e4e9c16b7d83610c8905167f7bd142c8147ee98439d", 0x1a}, 0x48, r4) (async) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "d4aabf781591dd08dc637fea3d93a35b32322571f923f660932e87ac90ed52b488d4a9ccb198f313a6449e4e9c16b7d83610c8905167f7bd142c8147ee98439d", 0x1a}, 0x48, r4) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) (async) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000540)={0x0, "8a90522de57fef2592f0e1d769b02e3125e4a1e255df3bed6a212a8ae7805d1d5419b4aaa582c80c8767dd64b17e7208b2baa4dc37689600bbf062feb5f53d94"}, 0x48, r5) (async) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000540)={0x0, "8a90522de57fef2592f0e1d769b02e3125e4a1e255df3bed6a212a8ae7805d1d5419b4aaa582c80c8767dd64b17e7208b2baa4dc37689600bbf062feb5f53d94"}, 0x48, r5) add_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, &(0x7f00000007c0), 0x0, r5) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\xa9\x00', r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000abd000/0x2000)=nil, 0x2000, 0x14) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x0, 0x0) 08:44:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:02 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@random="be6e0ea5fff4", @dev, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "06806f", 0x44, 0x29, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x3c000000}}}}}}}, 0x0) 08:44:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:02 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00003f0000/0x2000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r2, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000040}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/136, 0x88}], 0x9, &(0x7f0000000700)=""/4, 0x4}, 0x40000043) 08:44:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x2, 0x2, 0x10001, 0x0, 0x1}, 0x48) 08:44:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:02 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BLKFRASET(r0, 0xc0045878, 0x0) 08:44:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_RCVMTU(r0, 0x10e, 0xd, 0x0, 0x0) 08:44:03 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1000000}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@dstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x40}}], 0x1, 0x0) [ 685.396033][T17298] tipc: Enabling of bearer rejected, failed to enable media [ 686.057764][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.064175][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:44:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r2, 0x0, r3) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:05 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x280200, 0x0) 08:44:05 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) 08:44:05 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00003f0000/0x2000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r2, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000040}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/136, 0x88}], 0x9, &(0x7f0000000700)=""/4, 0x4}, 0x40000043) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00003f0000/0x2000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r2, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000040}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) (async) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/136, 0x88}], 0x9, &(0x7f0000000700)=""/4, 0x4}, 0x40000043) (async) 08:44:05 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) syz_open_pts(r0, 0x0) 08:44:05 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:05 executing program 2: getresgid(&(0x7f0000000040), &(0x7f0000000080), 0x0) 08:44:05 executing program 5: semctl$GETVAL(0x0, 0x0, 0x12, 0x0) 08:44:05 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 08:44:05 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x2, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 688.505194][T17327] tipc: Enabling of bearer rejected, failed to enable media 08:44:08 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:08 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00003f0000/0x2000)=nil) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2fc, r2, 0xc05, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x97}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf464}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x675}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf57b, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000040}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4008801}, 0x804) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/45, 0x2d}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/136, 0x88}], 0x9, &(0x7f0000000700)=""/4, 0x4}, 0x40000043) 08:44:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x40000021) 08:44:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010040) 08:44:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x3, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:08 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r2, 0x0, r3) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x4, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:08 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x1ff) 08:44:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x40030160) 08:44:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x140}, 0x0) 08:44:09 executing program 5: faccessat2(0xffffffffffffff9c, 0x0, 0x50, 0x0) 08:44:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x5, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 691.499557][T17359] tipc: Enabling of bearer rejected, failed to enable media 08:44:09 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x6, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:09 executing program 2: getresgid(&(0x7f0000004480), &(0x7f00000044c0), &(0x7f0000004500)) 08:44:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000004) 08:44:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x4eb81000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() r2 = syz_clone(0x400, &(0x7f0000000000)="7e938211ecbddee326d1c2c48fdaf59e601b7816a95d7686fd314ecc60d4cd60da38f61d2ec3a879e13b16caba7d0ed88242c3c3350bd4d6ae", 0x39, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcd1fd46a21b75b505252c7408566a5a7866f7db1dff904a588493804da98a7cd84b6898a9ab1d5292ae2bd33d5714b2dd635052e38036c9f92fb4ca637c0c483eb4a2a2222f56bd0aef8d13b7d4fedbaebf357d3c3da9aec7e930d2b45975f8ccd664aa") sched_setscheduler(r2, 0x6, &(0x7f0000000240)=0x4) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:44:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 693.151979][T17394] BUG: Bad page map in process syz-executor.1 pte:fffffd088c120 pmd:2299e067 [ 693.162005][T17394] page:ffffea0000bddcc0 refcount:1024 mapcount:-1 mapping:ffff88802c01bf58 index:0x173 pfn:0x2f773 [ 693.172805][T17394] head:ffffea0000bd8000 order:9 entire_mapcount:0 nr_pages_mapped:138 pincount:0 [ 693.182134][T17394] memcg:ffff888021a74000 [ 693.186393][T17394] aops:shmem_aops ino:e8 dentry name:"dev/zero" [ 693.193031][T17394] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 693.205199][T17394] page_type: 0xffffffff() [ 693.209819][T17394] raw: 00fff00000000000 ffffea0000bd8001 dead000000000122 dead000000000400 [ 693.219752][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 693.228565][T17394] head: 00fff5800008027c ffff888021a761a8 ffffea0000c88008 ffff88802c01bf58 [ 693.237441][T17394] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 693.246313][T17394] page dumped because: bad pte [ 693.251139][T17394] page_owner tracks the page as allocated [ 693.257744][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 693.274509][T17394] post_alloc_hook+0x2cf/0x340 [ 693.279380][T17394] get_page_from_freelist+0xee0/0x2f20 [ 693.284943][T17394] __alloc_pages+0x1d0/0x4a0 [ 693.289558][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 693.294685][T17394] collapse_file+0x20c/0x5720 [ 693.299466][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 693.305216][T17394] madvise_collapse+0x523/0xb70 [ 693.310148][T17394] madvise_vma_behavior+0x200/0x1e50 [ 693.315572][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 693.321579][T17394] do_madvise+0x333/0x660 [ 693.325936][T17394] __ia32_sys_madvise+0xa8/0x110 [ 693.331086][T17394] __do_fast_syscall_32+0x61/0xe0 [ 693.336139][T17394] do_fast_syscall_32+0x33/0x70 [ 693.341124][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.347486][T17394] page last free stack trace: [ 693.352266][T17394] free_unref_page_prepare+0x476/0xa40 [ 693.357766][T17394] free_unref_page+0x33/0x3b0 [ 693.362596][T17394] __folio_put+0xeb/0x110 [ 693.366958][T17394] put_page+0x21e/0x280 [ 693.371237][T17394] collapse_file+0x1147/0x5720 [ 693.376085][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 693.381801][T17394] madvise_collapse+0x523/0xb70 [ 693.386682][T17394] madvise_vma_behavior+0x200/0x1e50 [ 693.392028][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 693.396974][T17394] do_madvise+0x333/0x660 [ 693.401432][T17394] __ia32_sys_madvise+0xa8/0x110 [ 693.406418][T17394] __do_fast_syscall_32+0x61/0xe0 [ 693.411566][T17394] do_fast_syscall_32+0x33/0x70 [ 693.416443][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.423818][T17394] addr:0000000020175000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88802c01bf58 index:175 [ 693.434952][T17394] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 693.442792][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 693.453480][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 693.463543][T17394] Call Trace: [ 693.466814][T17394] [ 693.469737][T17394] dump_stack_lvl+0x125/0x1b0 [ 693.474498][T17394] print_bad_pte+0x501/0x7a0 [ 693.479109][T17394] ? __might_fault+0x1a0/0x1a0 [ 693.483872][T17394] ? folio_flags+0x71/0x1f0 [ 693.488375][T17394] ? page_remove_rmap+0x78d/0xd30 [ 693.493395][T17394] unmap_page_range+0x216a/0x2c10 [ 693.498422][T17394] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 693.503629][T17394] ? uprobe_munmap+0x20/0x570 [ 693.508354][T17394] unmap_single_vma+0x194/0x2b0 [ 693.513222][T17394] unmap_vmas+0x1e2/0x330 [ 693.517559][T17394] ? unmap_single_vma+0x2b0/0x2b0 [ 693.522583][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 693.527969][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 693.533205][T17394] exit_mmap+0x1ad/0xa60 [ 693.537461][T17394] ? uprobe_clear_state+0x4b/0x420 [ 693.542581][T17394] ? do_vma_munmap+0x70/0x70 [ 693.547206][T17394] __mmput+0x12a/0x4d0 [ 693.551299][T17394] mmput+0x62/0x70 [ 693.555019][T17394] do_exit+0x9ad/0x2a20 [ 693.559199][T17394] ? mm_update_next_owner+0x840/0x840 [ 693.564592][T17394] do_group_exit+0xd4/0x2a0 [ 693.569124][T17394] get_signal+0x23ba/0x2790 [ 693.573650][T17394] ? exit_signals+0x920/0x920 [ 693.578360][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 693.583931][T17394] ? get_sigframe_size+0x20/0x20 [ 693.588875][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 693.594444][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 693.600104][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 693.605575][T17394] asm_exc_page_fault+0x26/0x30 [ 693.610438][T17394] RIP: 0023:0x0 [ 693.613891][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 693.621245][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 693.627310][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 693.635288][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 693.643260][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 693.651229][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.659199][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.667181][T17394] [ 693.671659][T17394] Disabling lock debugging due to kernel taint [ 693.679012][T17394] BUG: Bad page map in process syz-executor.1 pte:fffffd088d120 pmd:2299e067 [ 693.687990][T17394] page:ffffea0000bddc80 refcount:1024 mapcount:-1 mapping:ffff88802c01bf58 index:0x172 pfn:0x2f772 [ 693.698911][T17394] head:ffffea0000bd8000 order:9 entire_mapcount:0 nr_pages_mapped:137 pincount:0 [ 693.708093][T17394] memcg:ffff888021a74000 [ 693.712361][T17394] aops:shmem_aops ino:e8 dentry name:"dev/zero" [ 693.719064][T17394] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 693.732419][T17394] page_type: 0xffffffff() [ 693.736864][T17394] raw: 00fff00000000000 ffffea0000bd8001 dead000000000122 dead000000000400 [ 693.745586][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 693.754238][T17394] head: 00fff5800008027c ffff888021a761a8 ffffea0000c88008 ffff88802c01bf58 [ 693.762957][T17394] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 693.771742][T17394] page dumped because: bad pte [ 693.776505][T17394] page_owner tracks the page as allocated [ 693.782239][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 693.799039][T17394] post_alloc_hook+0x2cf/0x340 08:44:11 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r2, 0x0, r3) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:11 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.log\x00', 0x589702, 0x0) 08:44:11 executing program 5: getresuid(&(0x7f00000036c0), &(0x7f0000003700), &(0x7f0000003740)) 08:44:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x7, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:11 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x4eb81000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() syz_clone(0x400, &(0x7f0000000000)="7e938211ecbddee326d1c2c48fdaf59e601b7816a95d7686fd314ecc60d4cd60da38f61d2ec3a879e13b16caba7d0ed88242c3c3350bd4d6ae", 0x39, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcd1fd46a21b75b505252c7408566a5a7866f7db1dff904a588493804da98a7cd84b6898a9ab1d5292ae2bd33d5714b2dd635052e38036c9f92fb4ca637c0c483eb4a2a2222f56bd0aef8d13b7d4fedbaebf357d3c3da9aec7e930d2b45975f8ccd664aa") (async) r2 = syz_clone(0x400, &(0x7f0000000000)="7e938211ecbddee326d1c2c48fdaf59e601b7816a95d7686fd314ecc60d4cd60da38f61d2ec3a879e13b16caba7d0ed88242c3c3350bd4d6ae", 0x39, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcd1fd46a21b75b505252c7408566a5a7866f7db1dff904a588493804da98a7cd84b6898a9ab1d5292ae2bd33d5714b2dd635052e38036c9f92fb4ca637c0c483eb4a2a2222f56bd0aef8d13b7d4fedbaebf357d3c3da9aec7e930d2b45975f8ccd664aa") sched_setscheduler(r2, 0x6, &(0x7f0000000240)=0x4) (async) sched_setscheduler(r2, 0x6, &(0x7f0000000240)=0x4) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:44:11 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:11 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x8, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 693.804410][T17394] get_page_from_freelist+0xee0/0x2f20 [ 693.809889][T17394] __alloc_pages+0x1d0/0x4a0 [ 693.815149][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 693.820224][T17394] collapse_file+0x20c/0x5720 [ 693.824921][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 693.830605][T17394] madvise_collapse+0x523/0xb70 [ 693.836849][T17394] madvise_vma_behavior+0x200/0x1e50 [ 693.842258][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 693.847212][T17394] do_madvise+0x333/0x660 [ 693.851842][T17394] __ia32_sys_madvise+0xa8/0x110 [ 693.856808][T17394] __do_fast_syscall_32+0x61/0xe0 [ 693.861939][T17394] do_fast_syscall_32+0x33/0x70 [ 693.866814][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.873196][T17394] page last free stack trace: [ 693.877867][T17394] free_unref_page_prepare+0x476/0xa40 [ 693.883462][T17394] free_unref_page+0x33/0x3b0 [ 693.888146][T17394] __folio_put+0xeb/0x110 [ 693.892537][T17394] put_page+0x21e/0x280 [ 693.896712][T17394] collapse_file+0x1147/0x5720 [ 693.901524][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 693.907176][T17394] madvise_collapse+0x523/0xb70 [ 693.912092][T17394] madvise_vma_behavior+0x200/0x1e50 [ 693.917398][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 693.922390][T17394] do_madvise+0x333/0x660 [ 693.926757][T17394] __ia32_sys_madvise+0xa8/0x110 [ 693.931760][T17394] __do_fast_syscall_32+0x61/0xe0 [ 693.937533][T17394] do_fast_syscall_32+0x33/0x70 [ 693.942491][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 693.948841][T17394] addr:0000000020176000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88802c01bf58 index:176 [ 693.959936][T17394] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 693.967723][T17394] CPU: 1 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 693.979708][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 693.989746][T17394] Call Trace: [ 693.993041][T17394] [ 693.995955][T17394] dump_stack_lvl+0x125/0x1b0 [ 694.000631][T17394] print_bad_pte+0x501/0x7a0 [ 694.005236][T17394] ? __might_fault+0x1a0/0x1a0 [ 694.009982][T17394] ? folio_flags+0x71/0x1f0 [ 694.014476][T17394] ? page_remove_rmap+0x78d/0xd30 [ 694.019493][T17394] unmap_page_range+0x216a/0x2c10 [ 694.024509][T17394] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 694.029697][T17394] ? uprobe_munmap+0x20/0x570 [ 694.034381][T17394] unmap_single_vma+0x194/0x2b0 [ 694.039317][T17394] unmap_vmas+0x1e2/0x330 [ 694.043640][T17394] ? unmap_single_vma+0x2b0/0x2b0 [ 694.048650][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 694.054019][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 694.059215][T17394] exit_mmap+0x1ad/0xa60 [ 694.063453][T17394] ? uprobe_clear_state+0x4b/0x420 [ 694.068550][T17394] ? do_vma_munmap+0x70/0x70 [ 694.073135][T17394] __mmput+0x12a/0x4d0 [ 694.077184][T17394] mmput+0x62/0x70 [ 694.080888][T17394] do_exit+0x9ad/0x2a20 [ 694.085035][T17394] ? mm_update_next_owner+0x840/0x840 [ 694.090415][T17394] do_group_exit+0xd4/0x2a0 [ 694.094906][T17394] get_signal+0x23ba/0x2790 [ 694.099393][T17394] ? exit_signals+0x920/0x920 [ 694.104056][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 694.109593][T17394] ? get_sigframe_size+0x20/0x20 [ 694.114517][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 694.120049][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 694.125678][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 694.131136][T17394] asm_exc_page_fault+0x26/0x30 [ 694.135976][T17394] RIP: 0023:0x0 [ 694.139424][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 694.146778][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 694.152829][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 694.160788][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 694.168807][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 694.176777][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.184999][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.192978][T17394] 08:44:12 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x200) 08:44:12 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) 08:44:12 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) 08:44:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0xb, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x8040, 0x0) write$FUSE_LK(r0, 0x0, 0x0) [ 694.582918][T17394] BUG: Bad page map in process syz-executor.1 pte:fffffd088e120 pmd:2299e067 [ 694.592419][T17394] page:ffffea0000bddc40 refcount:1024 mapcount:-1 mapping:ffff88802c01bf58 index:0x171 pfn:0x2f771 [ 694.603236][T17394] head:ffffea0000bd8000 order:9 entire_mapcount:0 nr_pages_mapped:136 pincount:0 [ 694.612496][T17394] memcg:ffff888021a74000 [ 694.616763][T17394] aops:shmem_aops ino:e8 dentry name:"dev/zero" [ 694.623202][T17394] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 694.635331][T17394] page_type: 0xffffffff() [ 694.639674][T17394] raw: 00fff00000000000 ffffea0000bd8001 dead000000000122 dead000000000400 [ 694.648314][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 694.658063][T17394] head: 00fff5800008027c ffff888021a761a8 ffffea0000c88008 ffff88802c01bf58 [ 694.667067][T17394] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 694.675805][T17394] page dumped because: bad pte [ 694.680744][T17394] page_owner tracks the page as allocated [ 694.686473][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 694.703217][T17394] post_alloc_hook+0x2cf/0x340 [ 694.707998][T17394] get_page_from_freelist+0xee0/0x2f20 [ 694.713524][T17394] __alloc_pages+0x1d0/0x4a0 [ 694.718128][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 694.723271][T17394] collapse_file+0x20c/0x5720 [ 694.727969][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 694.733700][T17394] madvise_collapse+0x523/0xb70 [ 694.738572][T17394] madvise_vma_behavior+0x200/0x1e50 [ 694.743934][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 694.748891][T17394] do_madvise+0x333/0x660 [ 694.753266][T17394] __ia32_sys_madvise+0xa8/0x110 [ 694.759115][T17394] __do_fast_syscall_32+0x61/0xe0 [ 694.764854][T17394] do_fast_syscall_32+0x33/0x70 [ 694.769739][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 694.776146][T17394] page last free stack trace: [ 694.780885][T17394] free_unref_page_prepare+0x476/0xa40 [ 694.786370][T17394] free_unref_page+0x33/0x3b0 [ 694.791112][T17394] __folio_put+0xeb/0x110 [ 694.795465][T17394] put_page+0x21e/0x280 [ 694.799652][T17394] collapse_file+0x1147/0x5720 [ 694.804512][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 694.810161][T17394] madvise_collapse+0x523/0xb70 [ 694.815078][T17394] madvise_vma_behavior+0x200/0x1e50 [ 694.820428][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 694.825385][T17394] do_madvise+0x333/0x660 [ 694.829731][T17394] __ia32_sys_madvise+0xa8/0x110 [ 694.834827][T17394] __do_fast_syscall_32+0x61/0xe0 [ 694.839866][T17394] do_fast_syscall_32+0x33/0x70 [ 694.844936][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 694.851335][T17394] addr:0000000020177000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88802c01bf58 index:177 [ 694.863488][T17394] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 694.871357][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 694.883265][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 694.893426][T17394] Call Trace: [ 694.896719][T17394] [ 694.899663][T17394] dump_stack_lvl+0x125/0x1b0 [ 694.904367][T17394] print_bad_pte+0x501/0x7a0 [ 694.908978][T17394] ? __might_fault+0x1a0/0x1a0 [ 694.913853][T17394] ? folio_flags+0x71/0x1f0 [ 694.918377][T17394] ? page_remove_rmap+0x78d/0xd30 [ 694.923423][T17394] unmap_page_range+0x216a/0x2c10 [ 694.928474][T17394] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 694.933685][T17394] ? uprobe_munmap+0x20/0x570 [ 694.938370][T17394] unmap_single_vma+0x194/0x2b0 [ 694.943217][T17394] unmap_vmas+0x1e2/0x330 [ 694.947542][T17394] ? unmap_single_vma+0x2b0/0x2b0 [ 694.953169][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 694.958640][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 694.963931][T17394] exit_mmap+0x1ad/0xa60 [ 694.968176][T17394] ? uprobe_clear_state+0x4b/0x420 [ 694.973292][T17394] ? do_vma_munmap+0x70/0x70 [ 694.977892][T17394] __mmput+0x12a/0x4d0 [ 694.981959][T17394] mmput+0x62/0x70 [ 694.985850][T17394] do_exit+0x9ad/0x2a20 [ 694.990009][T17394] ? mm_update_next_owner+0x840/0x840 [ 694.995384][T17394] do_group_exit+0xd4/0x2a0 [ 694.999987][T17394] get_signal+0x23ba/0x2790 [ 695.004486][T17394] ? exit_signals+0x920/0x920 [ 695.009248][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 695.014794][T17394] ? get_sigframe_size+0x20/0x20 [ 695.019730][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 695.025275][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 695.030905][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 695.036367][T17394] asm_exc_page_fault+0x26/0x30 [ 695.041211][T17394] RIP: 0023:0x0 [ 695.044656][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 695.052008][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 695.058066][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 695.066030][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 695.073996][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 695.081961][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.090012][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.098067][T17394] [ 695.172732][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f771 [ 695.188831][T17394] page:ffffea0000bddc40 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x2f771 [ 695.227738][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 695.253203][T17394] page_type: 0xfffffffe() [ 695.272748][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 695.281712][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 695.290667][T17394] page dumped because: nonzero mapcount [ 695.302957][T17394] page_owner tracks the page as allocated [ 695.315292][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 695.339616][T17394] post_alloc_hook+0x2cf/0x340 [ 695.350034][T17394] get_page_from_freelist+0xee0/0x2f20 [ 695.355628][T17394] __alloc_pages+0x1d0/0x4a0 [ 695.364844][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 695.372211][T17394] collapse_file+0x20c/0x5720 [ 695.376921][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 695.386795][T17394] madvise_collapse+0x523/0xb70 [ 695.391735][T17394] madvise_vma_behavior+0x200/0x1e50 [ 695.397053][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 695.402950][T17394] do_madvise+0x333/0x660 [ 695.407313][T17394] __ia32_sys_madvise+0xa8/0x110 [ 695.419446][T17394] __do_fast_syscall_32+0x61/0xe0 [ 695.424562][T17394] do_fast_syscall_32+0x33/0x70 [ 695.429512][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 695.445020][T17394] page last free stack trace: [ 695.449715][T17394] free_unref_page_prepare+0x476/0xa40 [ 695.455253][T17394] free_unref_page+0x33/0x3b0 [ 695.459943][T17394] __folio_put+0xeb/0x110 [ 695.468476][T17394] put_page+0x21e/0x280 [ 695.474262][T17394] collapse_file+0x1147/0x5720 [ 695.479144][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 695.490081][T17394] madvise_collapse+0x523/0xb70 [ 695.495039][T17394] madvise_vma_behavior+0x200/0x1e50 [ 695.504485][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 695.509457][T17394] do_madvise+0x333/0x660 [ 695.514041][T17394] __ia32_sys_madvise+0xa8/0x110 [ 695.519004][T17394] __do_fast_syscall_32+0x61/0xe0 [ 695.524585][T17394] do_fast_syscall_32+0x33/0x70 [ 695.529463][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 695.539765][T17394] Modules linked in: [ 695.546275][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 695.558371][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 695.569309][T17394] Call Trace: [ 695.572774][T17394] [ 695.575717][T17394] dump_stack_lvl+0x125/0x1b0 [ 695.577335][T17426] BUG: Bad page map in process syz-executor.1 pte:fffffc888c120 pmd:42d94067 [ 695.580402][T17394] bad_page+0xb4/0x200 [ 695.580436][T17394] ? folio_flags+0x120/0x120 [ 695.589274][T17426] page:ffffea0000dddcc0 refcount:1024 mapcount:-1 mapping:ffff88807e1345f8 index:0x173 pfn:0x37773 [ 695.593325][T17394] ? page_bad_reason+0x9d/0x190 [ 695.593359][T17394] free_unref_page_prepare+0x827/0xa40 [ 695.597936][T17426] head:ffffea0000dd8000 order:9 entire_mapcount:0 nr_pages_mapped:138 pincount:0 [ 695.609538][T17394] free_unref_page+0x33/0x3b0 [ 695.609564][T17394] release_pages+0x51b/0x14e0 [ 695.609591][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 695.609616][T17394] ? put_pages_list+0x570/0x570 [ 695.609642][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 695.609675][T17394] __folio_batch_release+0x77/0xe0 [ 695.609705][T17394] shmem_undo_range+0x582/0x1040 [ 695.609741][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 695.609772][T17394] ? __orc_find+0x104/0x130 [ 695.609803][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 695.609839][T17394] ? write_profile+0x450/0x450 [ 695.609871][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 695.609897][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 695.609923][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 695.614778][T17426] memcg:ffff888021a74000 [ 695.620204][T17394] shmem_evict_inode+0x392/0xb50 [ 695.629300][T17426] aops:shmem_aops ino:4db dentry name:"dev/zero" [ 695.634211][T17394] ? lock_acquire+0x464/0x510 [ 695.638886][T17426] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 695.644147][T17394] ? shmem_truncate_range+0x80/0x80 [ 695.648992][T17426] page_type: 0xffffffff() [ 695.654084][T17394] ? lock_release+0x4bf/0x680 [ 695.654113][T17394] ? evict+0x2b7/0x6b0 [ 695.659292][T17426] raw: 00fff00000000000 ffffea0000dd8001 dead000000000122 dead000000000400 [ 695.664195][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 695.669829][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 695.674297][T17394] ? sugov_init+0x840/0x840 [ 695.680991][T17426] head: 00fff5800008027c ffffea00016c9d08 ffffea000127c9c8 ffff88807e1345f8 [ 695.684394][T17394] ? spin_bug+0x1d0/0x1d0 [ 695.689581][T17426] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 695.695524][T17394] ? shmem_truncate_range+0x80/0x80 [ 695.695570][T17394] evict+0x2ed/0x6b0 [ 695.695601][T17394] iput.part.0+0x55e/0x7a0 [ 695.695631][T17394] ? __remove_inode_hash+0x130/0x130 [ 695.701428][T17426] page dumped because: bad pte [ 695.705602][T17394] iput+0x5c/0x80 [ 695.710542][T17426] page_owner tracks the page as allocated [ 695.716815][T17394] dentry_unlink_inode+0x292/0x430 [ 695.721505][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 [ 695.733598][T17394] __dentry_kill+0x3b8/0x640 [ 695.738785][T17426] post_alloc_hook+0x2cf/0x340 [ 695.743140][T17394] dput+0x8b7/0xf80 [ 695.747837][T17426] get_page_from_freelist+0xee0/0x2f20 [ 695.752069][T17394] __fput+0x536/0xa70 [ 695.752102][T17394] task_work_run+0x14d/0x240 [ 695.752132][T17394] ? task_work_cancel+0x30/0x30 [ 695.752162][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 695.752191][T17394] do_exit+0xa92/0x2a20 [ 695.752226][T17394] ? mm_update_next_owner+0x840/0x840 [ 695.752264][T17394] do_group_exit+0xd4/0x2a0 [ 695.752297][T17394] get_signal+0x23ba/0x2790 [ 695.752326][T17394] ? exit_signals+0x920/0x920 [ 695.752354][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 695.752386][T17394] ? get_sigframe_size+0x20/0x20 [ 695.752412][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 695.752446][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 695.752471][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 695.752501][T17394] asm_exc_page_fault+0x26/0x30 [ 695.752525][T17394] RIP: 0023:0x0 [ 695.752541][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 695.752551][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 695.752575][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 695.752590][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 695.752605][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 695.752619][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.752632][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.752652][T17394] [ 695.761365][T17426] __alloc_pages+0x1d0/0x4a0 [ 695.797263][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f772 [ 695.803373][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 695.803403][T17426] collapse_file+0x20c/0x5720 [ 695.803426][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 695.803453][T17426] madvise_collapse+0x523/0xb70 [ 695.803478][T17426] madvise_vma_behavior+0x200/0x1e50 [ 695.803504][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 695.803527][T17426] do_madvise+0x333/0x660 [ 695.803550][T17426] __ia32_sys_madvise+0xa8/0x110 [ 695.803574][T17426] __do_fast_syscall_32+0x61/0xe0 [ 695.803598][T17426] do_fast_syscall_32+0x33/0x70 [ 695.803619][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 695.803651][T17426] page last free stack trace: [ 695.803657][T17426] free_unref_page_prepare+0x476/0xa40 [ 695.803689][T17426] free_unref_page+0x33/0x3b0 [ 695.803708][T17426] release_pages+0x51b/0x14e0 [ 695.803733][T17426] __folio_batch_release+0x77/0xe0 [ 695.803760][T17426] shmem_undo_range+0x582/0x1040 [ 695.803788][T17426] shmem_evict_inode+0x392/0xb50 [ 695.803815][T17426] evict+0x2ed/0x6b0 [ 695.812741][T17394] page:ffffea0000bddc80 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x2f772 [ 695.813511][T17426] iput.part.0+0x55e/0x7a0 [ 695.817462][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 695.822834][T17426] iput+0x5c/0x80 [ 695.822863][T17426] dentry_unlink_inode+0x292/0x430 [ 695.822887][T17426] __dentry_kill+0x3b8/0x640 [ 695.822911][T17426] dput+0x8b7/0xf80 [ 695.822934][T17426] __fput+0x536/0xa70 [ 695.822958][T17426] task_work_run+0x14d/0x240 [ 695.827710][T17394] page_type: 0xfffffffe() [ 695.831439][T17426] do_exit+0xa92/0x2a20 [ 695.831470][T17426] do_group_exit+0xd4/0x2a0 [ 695.831501][T17426] addr:0000000020175000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88807e1345f8 index:175 [ 695.831523][T17426] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 695.831574][T17426] CPU: 1 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 695.831600][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 695.831612][T17426] Call Trace: [ 695.831620][T17426] [ 695.831628][T17426] dump_stack_lvl+0x125/0x1b0 [ 695.831652][T17426] print_bad_pte+0x501/0x7a0 [ 695.831676][T17426] ? __might_fault+0x1a0/0x1a0 [ 695.831697][T17426] ? folio_flags+0x71/0x1f0 [ 695.831722][T17426] ? page_remove_rmap+0x78d/0xd30 [ 695.831750][T17426] unmap_page_range+0x216a/0x2c10 [ 695.831781][T17426] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 695.837503][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 695.842720][T17426] ? uprobe_munmap+0x20/0x570 [ 695.842753][T17426] unmap_single_vma+0x194/0x2b0 [ 695.842779][T17426] unmap_vmas+0x1e2/0x330 [ 695.859528][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 695.864248][T17426] ? unmap_single_vma+0x2b0/0x2b0 [ 695.864278][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 695.869200][T17394] page dumped because: nonzero mapcount [ 695.873331][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 695.873364][T17426] exit_mmap+0x1ad/0xa60 [ 695.873393][T17426] ? uprobe_clear_state+0x4b/0x420 [ 695.873421][T17426] ? do_vma_munmap+0x70/0x70 [ 695.873452][T17426] ? rcu_is_watching+0x12/0xb0 [ 695.873486][T17426] __mmput+0x12a/0x4d0 [ 695.873511][T17426] mmput+0x62/0x70 [ 695.873533][T17426] do_exit+0x9ad/0x2a20 [ 695.873569][T17426] ? mm_update_next_owner+0x840/0x840 [ 695.873606][T17426] do_group_exit+0xd4/0x2a0 [ 695.873639][T17426] get_signal+0x23ba/0x2790 [ 695.873668][T17426] ? exit_signals+0x920/0x920 [ 695.873695][T17426] arch_do_signal_or_restart+0x90/0x7f0 [ 695.873728][T17426] ? get_sigframe_size+0x20/0x20 [ 695.884320][T17394] page_owner tracks the page as allocated [ 695.887702][T17426] ? __bad_area_nosemaphore+0x325/0x6a0 [ 695.892656][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 695.897794][T17426] exit_to_user_mode_prepare+0x11f/0x240 [ 695.901979][T17394] post_alloc_hook+0x2cf/0x340 [ 695.907430][T17426] irqentry_exit_to_user_mode+0x9/0x40 [ 695.911963][T17394] get_page_from_freelist+0xee0/0x2f20 [ 695.916407][T17426] asm_exc_page_fault+0x26/0x30 [ 695.921141][T17394] __alloc_pages+0x1d0/0x4a0 [ 695.926574][T17426] RIP: 0023:0x0 [ 695.931521][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 695.936997][T17426] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 696.448474][T17426] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 696.454713][T17426] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 696.462677][T17426] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 696.470641][T17426] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 696.478603][T17426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 696.486574][T17426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.494648][T17426] [ 696.510273][T17426] BUG: Bad page map in process syz-executor.1 pte:fffffc888d120 pmd:42d94067 [ 696.519157][T17426] page:ffffea0000dddc80 refcount:1024 mapcount:-1 mapping:ffff88807e1345f8 index:0x172 pfn:0x37772 [ 696.530037][T17426] head:ffffea0000dd8000 order:9 entire_mapcount:0 nr_pages_mapped:137 pincount:0 [ 696.539194][T17426] memcg:ffff888021a74000 [ 696.543521][T17426] aops:shmem_aops ino:4db dentry name:"dev/zero" [ 696.549902][T17426] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 696.562292][T17426] page_type: 0xffffffff() [ 696.566804][T17426] raw: 00fff00000000000 ffffea0000dd8001 dead000000000122 dead000000000400 [ 696.575433][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 696.584161][T17426] head: 00fff5800008027c ffffea00016c9d08 ffffea000127c9c8 ffff88807e1345f8 [ 696.592875][T17426] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 696.602552][T17426] page dumped because: bad pte [ 696.607315][T17426] page_owner tracks the page as allocated [ 696.613421][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 [ 696.630199][T17426] post_alloc_hook+0x2cf/0x340 [ 696.634980][T17426] get_page_from_freelist+0xee0/0x2f20 [ 696.639055][T17394] collapse_file+0x20c/0x5720 [ 696.640565][T17426] __alloc_pages+0x1d0/0x4a0 [ 696.645113][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 696.649673][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 696.655325][T17394] madvise_collapse+0x523/0xb70 [ 696.660321][T17426] collapse_file+0x20c/0x5720 [ 696.660344][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 696.675530][T17394] madvise_vma_behavior+0x200/0x1e50 [ 696.675563][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 696.680857][T17426] madvise_collapse+0x523/0xb70 [ 696.686268][T17394] do_madvise+0x333/0x660 [ 696.690659][T17426] madvise_vma_behavior+0x200/0x1e50 [ 696.695373][T17394] __ia32_sys_madvise+0xa8/0x110 [ 696.701118][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 696.701145][T17426] do_madvise+0x333/0x660 [ 696.701168][T17426] __ia32_sys_madvise+0xa8/0x110 [ 696.701193][T17426] __do_fast_syscall_32+0x61/0xe0 [ 696.701217][T17426] do_fast_syscall_32+0x33/0x70 [ 696.701238][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 696.701269][T17426] page last free stack trace: [ 696.701275][T17426] free_unref_page_prepare+0x476/0xa40 [ 696.701307][T17426] free_unref_page+0x33/0x3b0 [ 696.701326][T17426] release_pages+0x51b/0x14e0 [ 696.701351][T17426] __folio_batch_release+0x77/0xe0 [ 696.701377][T17426] shmem_undo_range+0x582/0x1040 [ 696.701405][T17426] shmem_evict_inode+0x392/0xb50 [ 696.701433][T17426] evict+0x2ed/0x6b0 [ 696.701467][T17426] iput.part.0+0x55e/0x7a0 [ 696.701495][T17426] iput+0x5c/0x80 [ 696.701522][T17426] dentry_unlink_inode+0x292/0x430 [ 696.701547][T17426] __dentry_kill+0x3b8/0x640 [ 696.701570][T17426] dput+0x8b7/0xf80 [ 696.701593][T17426] __fput+0x536/0xa70 [ 696.701617][T17426] task_work_run+0x14d/0x240 [ 696.701647][T17426] do_exit+0xa92/0x2a20 [ 696.701676][T17426] do_group_exit+0xd4/0x2a0 [ 696.701707][T17426] addr:0000000020176000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88807e1345f8 index:176 [ 696.701729][T17426] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 696.701779][T17426] CPU: 0 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 696.701805][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 696.701817][T17426] Call Trace: [ 696.701825][T17426] [ 696.711217][T17394] __do_fast_syscall_32+0x61/0xe0 [ 696.711690][T17426] dump_stack_lvl+0x125/0x1b0 [ 696.716049][T17394] do_fast_syscall_32+0x33/0x70 [ 696.720920][T17426] print_bad_pte+0x501/0x7a0 [ 696.720946][T17426] ? __might_fault+0x1a0/0x1a0 [ 696.726604][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 696.730773][T17426] ? folio_flags+0x71/0x1f0 [ 696.730800][T17426] ? page_remove_rmap+0x78d/0xd30 [ 696.737825][T17394] page last free stack trace: [ 696.741860][T17426] unmap_page_range+0x216a/0x2c10 [ 696.741898][T17426] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 696.748734][T17394] free_unref_page_prepare+0x476/0xa40 [ 696.752001][T17426] ? uprobe_munmap+0x20/0x570 [ 696.752033][T17426] unmap_single_vma+0x194/0x2b0 [ 696.752057][T17426] unmap_vmas+0x1e2/0x330 [ 696.752079][T17426] ? unmap_single_vma+0x2b0/0x2b0 [ 696.752099][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 696.752132][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 696.752165][T17426] exit_mmap+0x1ad/0xa60 [ 696.752197][T17426] ? uprobe_clear_state+0x4b/0x420 [ 696.752227][T17426] ? do_vma_munmap+0x70/0x70 [ 696.752255][T17426] ? rcu_is_watching+0x12/0xb0 [ 696.752285][T17426] __mmput+0x12a/0x4d0 [ 696.773374][T17394] free_unref_page+0x33/0x3b0 [ 696.775840][T17426] mmput+0x62/0x70 [ 696.780573][T17394] __folio_put+0xeb/0x110 [ 696.783855][T17426] do_exit+0x9ad/0x2a20 [ 696.789004][T17394] put_page+0x21e/0x280 [ 696.793532][T17426] ? mm_update_next_owner+0x840/0x840 [ 696.793571][T17426] do_group_exit+0xd4/0x2a0 [ 696.798059][T17394] collapse_file+0x1147/0x5720 [ 696.801309][T17426] get_signal+0x23ba/0x2790 [ 696.801337][T17426] ? exit_signals+0x920/0x920 [ 696.801363][T17426] arch_do_signal_or_restart+0x90/0x7f0 [ 696.801393][T17426] ? get_sigframe_size+0x20/0x20 [ 696.801418][T17426] ? __bad_area_nosemaphore+0x325/0x6a0 [ 696.801457][T17426] exit_to_user_mode_prepare+0x11f/0x240 [ 696.801483][T17426] irqentry_exit_to_user_mode+0x9/0x40 [ 696.801514][T17426] asm_exc_page_fault+0x26/0x30 [ 696.801541][T17426] RIP: 0023:0x0 [ 696.801555][T17426] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 696.801565][T17426] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 696.801584][T17426] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 696.801599][T17426] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 696.801615][T17426] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 696.801628][T17426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 696.801642][T17426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.801663][T17426] [ 696.815777][T17426] BUG: Bad page map in process syz-executor.1 pte:fffffc888e120 pmd:42d94067 [ 696.819944][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 696.827800][T17426] page:ffffea0000dddc40 refcount:1024 mapcount:-1 mapping:ffff88807e1345f8 index:0x171 pfn:0x37771 [ 696.839423][T17394] madvise_collapse+0x523/0xb70 [ 696.848192][T17426] head:ffffea0000dd8000 order:9 entire_mapcount:0 nr_pages_mapped:136 pincount:0 [ 696.866433][T17394] madvise_vma_behavior+0x200/0x1e50 [ 696.869353][T17426] memcg:ffff888021a74000 [ 696.869366][T17426] aops:shmem_aops ino:4db dentry name:"dev/zero" [ 696.876822][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 696.878888][T17426] flags: 0xfff5800008027c(referenced|uptodate|dirty|lru|workingset|head|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 696.884104][T17394] do_madvise+0x333/0x660 [ 696.888252][T17426] page_type: 0xffffffff() [ 696.888274][T17426] raw: 00fff00000000000 ffffea0000dd8001 dead000000000122 dead000000000400 [ 696.899053][T17394] __ia32_sys_madvise+0xa8/0x110 [ 696.899197][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 697.218256][T17426] head: 00fff5800008027c ffffea00016c9d08 ffffea000127c9c8 ffff88807e1345f8 [ 697.226978][T17426] head: 0000000000000000 0000000000000000 00000400ffffffff ffff888021a74000 [ 697.235664][T17426] page dumped because: bad pte [ 697.240648][T17426] page_owner tracks the page as allocated [ 697.246344][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 [ 697.263104][T17426] post_alloc_hook+0x2cf/0x340 [ 697.267853][T17426] get_page_from_freelist+0xee0/0x2f20 [ 697.273350][T17426] __alloc_pages+0x1d0/0x4a0 [ 697.277923][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 697.283252][T17426] collapse_file+0x20c/0x5720 [ 697.287916][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 697.293654][T17426] madvise_collapse+0x523/0xb70 [ 697.298492][T17426] madvise_vma_behavior+0x200/0x1e50 [ 697.303817][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 697.308748][T17426] do_madvise+0x333/0x660 [ 697.313092][T17426] __ia32_sys_madvise+0xa8/0x110 [ 697.318469][T17426] __do_fast_syscall_32+0x61/0xe0 [ 697.323571][T17426] do_fast_syscall_32+0x33/0x70 [ 697.328417][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 697.334856][T17426] page last free stack trace: [ 697.339507][T17426] free_unref_page_prepare+0x476/0xa40 [ 697.345083][T17426] free_unref_page+0x33/0x3b0 [ 697.349741][T17426] release_pages+0x51b/0x14e0 [ 697.354422][T17426] __folio_batch_release+0x77/0xe0 [ 697.359520][T17426] shmem_undo_range+0x582/0x1040 [ 697.364471][T17426] shmem_evict_inode+0x392/0xb50 [ 697.369482][T17426] evict+0x2ed/0x6b0 [ 697.373379][T17426] iput.part.0+0x55e/0x7a0 [ 697.377795][T17426] iput+0x5c/0x80 [ 697.381444][T17426] dentry_unlink_inode+0x292/0x430 [ 697.386565][T17426] __dentry_kill+0x3b8/0x640 [ 697.391163][T17426] dput+0x8b7/0xf80 [ 697.394962][T17426] __fput+0x536/0xa70 [ 697.398930][T17426] task_work_run+0x14d/0x240 [ 697.403545][T17426] do_exit+0xa92/0x2a20 [ 697.407689][T17426] do_group_exit+0xd4/0x2a0 [ 697.412210][T17426] addr:0000000020177000 vm_flags:080000f8 anon_vma:0000000000000000 mapping:ffff88807e1345f8 index:177 [ 697.423651][T17426] file:dev/zero fault:shmem_fault mmap:shmem_mmap read_folio:0x0 [ 697.431509][T17426] CPU: 0 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 697.443465][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 697.453595][T17426] Call Trace: [ 697.456862][T17426] [ 697.459777][T17426] dump_stack_lvl+0x125/0x1b0 [ 697.464440][T17426] print_bad_pte+0x501/0x7a0 [ 697.469014][T17426] ? __might_fault+0x1a0/0x1a0 [ 697.473757][T17426] ? folio_flags+0x71/0x1f0 [ 697.478240][T17426] ? page_remove_rmap+0x78d/0xd30 [ 697.483247][T17426] unmap_page_range+0x216a/0x2c10 [ 697.488275][T17426] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 697.493459][T17426] ? uprobe_munmap+0x20/0x570 [ 697.498127][T17426] unmap_single_vma+0x194/0x2b0 [ 697.502961][T17426] unmap_vmas+0x1e2/0x330 [ 697.507276][T17426] ? unmap_single_vma+0x2b0/0x2b0 [ 697.512303][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 697.517668][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 697.522794][T17426] exit_mmap+0x1ad/0xa60 [ 697.527293][T17426] ? uprobe_clear_state+0x4b/0x420 [ 697.532392][T17426] ? do_vma_munmap+0x70/0x70 [ 697.536985][T17426] ? rcu_is_watching+0x12/0xb0 [ 697.541757][T17426] __mmput+0x12a/0x4d0 [ 697.545847][T17426] mmput+0x62/0x70 [ 697.549566][T17426] do_exit+0x9ad/0x2a20 [ 697.553720][T17426] ? mm_update_next_owner+0x840/0x840 [ 697.559106][T17426] do_group_exit+0xd4/0x2a0 [ 697.563789][T17426] get_signal+0x23ba/0x2790 [ 697.568280][T17426] ? exit_signals+0x920/0x920 [ 697.572949][T17426] arch_do_signal_or_restart+0x90/0x7f0 [ 697.578499][T17426] ? get_sigframe_size+0x20/0x20 [ 697.583438][T17426] ? __bad_area_nosemaphore+0x325/0x6a0 [ 697.588990][T17426] exit_to_user_mode_prepare+0x11f/0x240 [ 697.594618][T17426] irqentry_exit_to_user_mode+0x9/0x40 [ 697.600091][T17426] asm_exc_page_fault+0x26/0x30 [ 697.604937][T17426] RIP: 0023:0x0 [ 697.608378][T17426] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 697.615723][T17426] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 697.621783][T17426] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 697.629757][T17426] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 697.637715][T17426] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 697.645674][T17426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 697.653627][T17426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.661585][T17426] [ 697.741043][T17394] __do_fast_syscall_32+0x61/0xe0 [ 697.746114][T17394] do_fast_syscall_32+0x33/0x70 [ 697.779205][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 697.791277][T17426] BUG: Bad page state in process syz-executor.1 pfn:37771 [ 697.800719][T17426] page:ffffea0000dddc40 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x37771 [ 697.812157][T17426] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 697.820816][T17426] page_type: 0xfffffffe() [ 697.825209][T17426] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 697.827766][T17394] Modules linked in: 08:44:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) 08:44:15 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x24, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 08:44:15 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x4eb81000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r1 = getpid() syz_clone(0x400, &(0x7f0000000000)="7e938211ecbddee326d1c2c48fdaf59e601b7816a95d7686fd314ecc60d4cd60da38f61d2ec3a879e13b16caba7d0ed88242c3c3350bd4d6ae", 0x39, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcd1fd46a21b75b505252c7408566a5a7866f7db1dff904a588493804da98a7cd84b6898a9ab1d5292ae2bd33d5714b2dd635052e38036c9f92fb4ca637c0c483eb4a2a2222f56bd0aef8d13b7d4fedbaebf357d3c3da9aec7e930d2b45975f8ccd664aa") (async) r2 = syz_clone(0x400, &(0x7f0000000000)="7e938211ecbddee326d1c2c48fdaf59e601b7816a95d7686fd314ecc60d4cd60da38f61d2ec3a879e13b16caba7d0ed88242c3c3350bd4d6ae", 0x39, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcd1fd46a21b75b505252c7408566a5a7866f7db1dff904a588493804da98a7cd84b6898a9ab1d5292ae2bd33d5714b2dd635052e38036c9f92fb4ca637c0c483eb4a2a2222f56bd0aef8d13b7d4fedbaebf357d3c3da9aec7e930d2b45975f8ccd664aa") sched_setscheduler(r2, 0x6, &(0x7f0000000240)=0x4) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:44:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 697.836201][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 697.849427][T17426] page dumped because: nonzero mapcount [ 697.849449][T17394] [ 697.914857][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 697.926775][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 697.936829][T17394] Call Trace: [ 697.940124][T17394] [ 697.943050][T17394] dump_stack_lvl+0x125/0x1b0 [ 697.947725][T17394] bad_page+0xb4/0x200 [ 697.951801][T17394] ? folio_flags+0x120/0x120 [ 697.956393][T17394] ? page_bad_reason+0x9d/0x190 [ 697.961247][T17394] free_unref_page_prepare+0x827/0xa40 [ 697.966710][T17394] free_unref_page+0x33/0x3b0 [ 697.971385][T17394] release_pages+0x51b/0x14e0 [ 697.976063][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 697.981173][T17394] ? put_pages_list+0x570/0x570 [ 697.986019][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 697.991132][T17394] __folio_batch_release+0x77/0xe0 [ 697.996239][T17394] shmem_undo_range+0x582/0x1040 [ 698.001182][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 698.006821][T17394] ? __orc_find+0x104/0x130 [ 698.011322][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 698.016698][T17394] ? write_profile+0x450/0x450 [ 698.021462][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 698.026663][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 698.032641][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 698.038385][T17394] shmem_evict_inode+0x392/0xb50 [ 698.043505][T17394] ? lock_acquire+0x464/0x510 [ 698.048200][T17394] ? shmem_truncate_range+0x80/0x80 [ 698.053427][T17394] ? lock_release+0x4bf/0x680 [ 698.058100][T17394] ? evict+0x2b7/0x6b0 [ 698.062173][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 698.067542][T17394] ? sugov_init+0x840/0x840 [ 698.072046][T17394] ? spin_bug+0x1d0/0x1d0 [ 698.076406][T17394] ? shmem_truncate_range+0x80/0x80 [ 698.081602][T17394] evict+0x2ed/0x6b0 [ 698.085591][T17394] iput.part.0+0x55e/0x7a0 [ 698.090009][T17394] ? __remove_inode_hash+0x130/0x130 [ 698.095294][T17394] iput+0x5c/0x80 [ 698.098939][T17394] dentry_unlink_inode+0x292/0x430 [ 698.104047][T17394] __dentry_kill+0x3b8/0x640 [ 698.108635][T17394] dput+0x8b7/0xf80 [ 698.112443][T17394] __fput+0x536/0xa70 [ 698.116427][T17394] task_work_run+0x14d/0x240 [ 698.121024][T17394] ? task_work_cancel+0x30/0x30 [ 698.125875][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 698.131076][T17394] do_exit+0xa92/0x2a20 [ 698.135253][T17394] ? mm_update_next_owner+0x840/0x840 [ 698.140633][T17394] do_group_exit+0xd4/0x2a0 [ 698.145144][T17394] get_signal+0x23ba/0x2790 [ 698.149818][T17394] ? exit_signals+0x920/0x920 [ 698.154493][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 698.160039][T17394] ? get_sigframe_size+0x20/0x20 [ 698.164973][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 698.170523][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 698.176169][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 698.181715][T17394] asm_exc_page_fault+0x26/0x30 [ 698.186562][T17394] RIP: 0023:0x0 [ 698.190012][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 698.197375][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 698.203433][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 698.211394][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 698.219704][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 698.227676][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.235643][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.243620][T17394] [ 698.281522][T17426] page_owner tracks the page as allocated [ 698.301347][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 08:44:16 executing program 5: getresuid(&(0x7f00000036c0), &(0x7f0000003700), 0x0) 08:44:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x38, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:16 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) [ 698.373656][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f773 [ 698.394642][T17394] page:ffffea0000bddcc0 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x2f773 08:44:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0xf0, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:16 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) 08:44:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) [ 698.547651][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 698.547725][T17426] post_alloc_hook+0x2cf/0x340 [ 698.567667][T17394] page_type: 0xfffffffe() [ 698.642147][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 698.679316][T17394] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 698.683052][T17426] get_page_from_freelist+0xee0/0x2f20 [ 698.830008][T17426] __alloc_pages+0x1d0/0x4a0 [ 698.837987][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 698.856897][T17426] collapse_file+0x20c/0x5720 [ 698.870233][T17394] page dumped because: nonzero mapcount [ 698.885677][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 698.901177][T17426] madvise_collapse+0x523/0xb70 [ 698.901559][T17394] page_owner tracks the page as allocated [ 698.917011][T17426] madvise_vma_behavior+0x200/0x1e50 [ 698.922403][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 698.922443][T17394] post_alloc_hook+0x2cf/0x340 [ 698.922463][T17394] get_page_from_freelist+0xee0/0x2f20 [ 698.922483][T17394] __alloc_pages+0x1d0/0x4a0 [ 698.922503][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 698.922528][T17394] collapse_file+0x20c/0x5720 [ 698.922552][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 698.922577][T17394] madvise_collapse+0x523/0xb70 [ 698.922602][T17394] madvise_vma_behavior+0x200/0x1e50 [ 698.922625][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 698.922649][T17394] do_madvise+0x333/0x660 [ 698.922671][T17394] __ia32_sys_madvise+0xa8/0x110 [ 698.922694][T17394] __do_fast_syscall_32+0x61/0xe0 [ 698.922717][T17394] do_fast_syscall_32+0x33/0x70 [ 698.922737][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 699.000962][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 699.021515][T17426] do_madvise+0x333/0x660 [ 699.025947][T17426] __ia32_sys_madvise+0xa8/0x110 [ 699.028653][T17394] page last free stack trace: [ 699.036100][T17394] free_unref_page_prepare+0x476/0xa40 [ 699.038805][T17426] __do_fast_syscall_32+0x61/0xe0 [ 699.041954][T17394] free_unref_page+0x33/0x3b0 [ 699.051952][T17394] __folio_put+0xeb/0x110 [ 699.053697][T17426] do_fast_syscall_32+0x33/0x70 [ 699.058250][T17394] put_page+0x21e/0x280 [ 699.069743][T17394] collapse_file+0x1147/0x5720 [ 699.074844][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 699.076429][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 699.080920][T17394] madvise_collapse+0x523/0xb70 [ 699.080949][T17394] madvise_vma_behavior+0x200/0x1e50 [ 699.080974][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 699.080997][T17394] do_madvise+0x333/0x660 [ 699.090915][T17426] page last free stack trace: [ 699.114949][T17394] __ia32_sys_madvise+0xa8/0x110 [ 699.115890][T17426] free_unref_page_prepare+0x476/0xa40 [ 699.119978][T17394] __do_fast_syscall_32+0x61/0xe0 [ 699.125407][T17426] free_unref_page+0x33/0x3b0 [ 699.139258][T17426] release_pages+0x51b/0x14e0 [ 699.140273][T17394] do_fast_syscall_32+0x33/0x70 [ 699.144016][T17426] __folio_batch_release+0x77/0xe0 [ 699.152686][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 699.162335][T17426] shmem_undo_range+0x582/0x1040 [ 699.167400][T17426] shmem_evict_inode+0x392/0xb50 [ 699.173072][T17394] Modules linked in: [ 699.175354][T17426] evict+0x2ed/0x6b0 [ 699.181642][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 699.182310][T17426] iput.part.0+0x55e/0x7a0 [ 699.193527][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 699.193540][T17394] Call Trace: [ 699.193547][T17394] [ 699.193555][T17394] dump_stack_lvl+0x125/0x1b0 [ 699.197987][T17426] iput+0x5c/0x80 [ 699.207988][T17394] bad_page+0xb4/0x200 [ 699.208019][T17394] ? folio_flags+0x120/0x120 [ 699.211314][T17426] dentry_unlink_inode+0x292/0x430 [ 699.214194][T17394] ? page_bad_reason+0x9d/0x190 [ 699.219140][T17426] __dentry_kill+0x3b8/0x640 [ 699.222722][T17394] free_unref_page_prepare+0x827/0xa40 [ 699.226809][T17426] dput+0x8b7/0xf80 [ 699.231349][T17394] free_unref_page+0x33/0x3b0 [ 699.231374][T17394] release_pages+0x51b/0x14e0 [ 699.231401][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 699.231426][T17394] ? put_pages_list+0x570/0x570 [ 699.231452][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 699.231484][T17394] __folio_batch_release+0x77/0xe0 [ 699.231514][T17394] shmem_undo_range+0x582/0x1040 [ 699.231552][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 699.231582][T17394] ? __orc_find+0x104/0x130 [ 699.231614][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 699.231652][T17394] ? write_profile+0x450/0x450 [ 699.231683][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 699.231712][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 699.231745][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 699.231784][T17394] shmem_evict_inode+0x392/0xb50 [ 699.231815][T17394] ? lock_acquire+0x464/0x510 [ 699.231846][T17394] ? shmem_truncate_range+0x80/0x80 [ 699.231873][T17394] ? lock_release+0x4bf/0x680 [ 699.231898][T17394] ? evict+0x2b7/0x6b0 [ 699.350416][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 699.355804][T17394] ? sugov_init+0x840/0x840 [ 699.360306][T17394] ? spin_bug+0x1d0/0x1d0 [ 699.364656][T17394] ? shmem_truncate_range+0x80/0x80 [ 699.369853][T17394] evict+0x2ed/0x6b0 [ 699.373756][T17394] iput.part.0+0x55e/0x7a0 [ 699.378174][T17394] ? __remove_inode_hash+0x130/0x130 [ 699.383468][T17394] iput+0x5c/0x80 [ 699.387109][T17394] dentry_unlink_inode+0x292/0x430 [ 699.392215][T17394] __dentry_kill+0x3b8/0x640 [ 699.396804][T17394] dput+0x8b7/0xf80 [ 699.400618][T17394] __fput+0x536/0xa70 [ 699.404609][T17394] task_work_run+0x14d/0x240 [ 699.409198][T17394] ? task_work_cancel+0x30/0x30 [ 699.414058][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 699.419260][T17394] do_exit+0xa92/0x2a20 [ 699.423419][T17394] ? mm_update_next_owner+0x840/0x840 [ 699.428794][T17394] do_group_exit+0xd4/0x2a0 [ 699.433301][T17394] get_signal+0x23ba/0x2790 [ 699.437801][T17394] ? exit_signals+0x920/0x920 [ 699.442474][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 699.448020][T17394] ? get_sigframe_size+0x20/0x20 [ 699.452953][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 699.458506][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 699.464136][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 699.469603][T17394] asm_exc_page_fault+0x26/0x30 [ 699.474541][T17394] RIP: 0023:0x0 [ 699.477992][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 699.485347][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 699.491405][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 699.499366][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 699.507334][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 699.515296][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.523258][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.531228][T17394] 08:44:17 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) 08:44:17 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x300, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) [ 699.554852][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f775 [ 699.554993][T17426] __fput+0x536/0xa70 [ 699.569046][T17426] task_work_run+0x14d/0x240 [ 699.572484][T17394] page:ffffea0000bddd40 refcount:0 mapcount:1 mapping:0000000000000000 index:0x1 pfn:0x2f775 [ 699.576595][T17426] do_exit+0xa92/0x2a20 [ 699.589747][T17426] do_group_exit+0xd4/0x2a0 [ 699.596205][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 699.597398][T17426] Modules linked in: [ 699.651408][T17394] page_type: 0x0() [ 699.683996][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 699.743382][T17426] [ 699.746883][T17426] CPU: 1 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 699.758799][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 699.768874][T17426] Call Trace: [ 699.772160][T17426] [ 699.775200][T17426] dump_stack_lvl+0x125/0x1b0 [ 699.779892][T17426] bad_page+0xb4/0x200 [ 699.784064][T17426] ? folio_flags+0x120/0x120 [ 699.788663][T17426] ? page_bad_reason+0x9d/0x190 [ 699.793525][T17426] free_unref_page_prepare+0x827/0xa40 [ 699.798998][T17426] free_unref_page+0x33/0x3b0 [ 699.803764][T17426] release_pages+0x51b/0x14e0 [ 699.808441][T17426] ? mlock_drain_local+0x22e/0x4f0 [ 699.813553][T17426] ? put_pages_list+0x570/0x570 [ 699.818399][T17426] ? spin_bug+0x1d0/0x1d0 [ 699.822738][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 699.827849][T17426] __folio_batch_release+0x77/0xe0 [ 699.832964][T17426] shmem_undo_range+0x582/0x1040 [ 699.837907][T17426] ? shmem_get_partial_folio+0x330/0x330 [ 699.843539][T17426] ? __orc_find+0x104/0x130 [ 699.848041][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 699.853418][T17426] ? write_profile+0x450/0x450 [ 699.858193][T17426] ? is_bpf_text_address+0x94/0x1a0 [ 699.863391][T17426] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 699.869368][T17426] ? percpu_counter_add_batch+0x132/0x1f0 [ 699.875093][T17426] shmem_evict_inode+0x392/0xb50 [ 699.880036][T17426] ? lock_acquire+0x464/0x510 [ 699.884726][T17426] ? shmem_truncate_range+0x80/0x80 [ 699.889932][T17426] ? lock_release+0x4bf/0x680 [ 699.894604][T17426] ? evict+0x2b7/0x6b0 [ 699.898673][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 699.904045][T17426] ? sugov_init+0x840/0x840 [ 699.908561][T17426] ? spin_bug+0x1d0/0x1d0 [ 699.913328][T17426] ? shmem_truncate_range+0x80/0x80 [ 699.918532][T17426] evict+0x2ed/0x6b0 [ 699.922428][T17426] iput.part.0+0x55e/0x7a0 [ 699.926847][T17426] ? __remove_inode_hash+0x130/0x130 [ 699.932134][T17426] iput+0x5c/0x80 [ 699.935770][T17426] dentry_unlink_inode+0x292/0x430 [ 699.940880][T17426] __dentry_kill+0x3b8/0x640 [ 699.945471][T17426] dput+0x8b7/0xf80 [ 699.949276][T17426] __fput+0x536/0xa70 [ 699.953261][T17426] task_work_run+0x14d/0x240 [ 699.957854][T17426] ? task_work_cancel+0x30/0x30 [ 699.962706][T17426] ? do_raw_spin_unlock+0x173/0x230 [ 699.967905][T17426] do_exit+0xa92/0x2a20 [ 699.972064][T17426] ? mm_update_next_owner+0x840/0x840 [ 699.977441][T17426] do_group_exit+0xd4/0x2a0 [ 699.981956][T17426] get_signal+0x23ba/0x2790 [ 699.986457][T17426] ? exit_signals+0x920/0x920 [ 699.991132][T17426] arch_do_signal_or_restart+0x90/0x7f0 [ 699.996689][T17426] ? get_sigframe_size+0x20/0x20 [ 700.001625][T17426] ? __bad_area_nosemaphore+0x325/0x6a0 [ 700.007198][T17426] exit_to_user_mode_prepare+0x11f/0x240 [ 700.012833][T17426] irqentry_exit_to_user_mode+0x9/0x40 [ 700.018290][T17426] asm_exc_page_fault+0x26/0x30 [ 700.023136][T17426] RIP: 0023:0x0 [ 700.026584][T17426] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 700.033941][T17426] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 700.039998][T17426] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 700.047958][T17426] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 700.055927][T17426] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 700.063893][T17426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 700.071856][T17426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.079833][T17426] [ 700.117752][T17394] raw: 0000000000000001 0000000000000000 0000000000000000 0000000000000000 [ 700.132125][T17394] page dumped because: nonzero mapcount [ 700.137700][T17394] page_owner tracks the page as allocated [ 700.144264][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 700.166584][T17394] post_alloc_hook+0x2cf/0x340 [ 700.186547][T17394] get_page_from_freelist+0xee0/0x2f20 [ 700.197801][T17394] __alloc_pages+0x1d0/0x4a0 [ 700.203613][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 700.209120][T17394] collapse_file+0x20c/0x5720 [ 700.214253][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 700.219936][T17426] BUG: Bad page state in process syz-executor.1 pfn:37772 [ 700.228386][T17394] madvise_collapse+0x523/0xb70 [ 700.233501][T17394] madvise_vma_behavior+0x200/0x1e50 [ 700.238947][T17426] page:ffffea0000dddc80 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x37772 [ 700.252484][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 700.257564][T17394] do_madvise+0x333/0x660 [ 700.263124][T17426] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 700.270829][T17394] __ia32_sys_madvise+0xa8/0x110 [ 700.276463][T17426] page_type: 0xfffffffe() [ 700.282033][T17394] __do_fast_syscall_32+0x61/0xe0 [ 700.293984][T17426] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 700.310458][T17394] do_fast_syscall_32+0x33/0x70 [ 700.322469][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 700.330116][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 700.335208][T17426] page dumped because: nonzero mapcount [ 700.343066][T17426] page_owner tracks the page as allocated [ 700.348840][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 [ 700.350239][T17394] page last free stack trace: [ 700.370323][T17426] post_alloc_hook+0x2cf/0x340 [ 700.375275][T17426] get_page_from_freelist+0xee0/0x2f20 [ 700.381214][T17426] __alloc_pages+0x1d0/0x4a0 [ 700.385879][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 700.390754][T17394] free_unref_page_prepare+0x476/0xa40 [ 700.396619][T17426] collapse_file+0x20c/0x5720 [ 700.401787][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 700.403355][T17394] free_unref_page+0x33/0x3b0 [ 700.407476][T17426] madvise_collapse+0x523/0xb70 [ 700.423554][T17426] madvise_vma_behavior+0x200/0x1e50 [ 700.426614][T17394] __folio_put+0xeb/0x110 [ 700.428942][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 700.441467][T17394] put_page+0x21e/0x280 [ 700.442425][T17426] do_madvise+0x333/0x660 [ 700.450013][T17394] collapse_file+0x1147/0x5720 [ 700.450026][T17426] __ia32_sys_madvise+0xa8/0x110 [ 700.459858][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 700.461523][T17426] __do_fast_syscall_32+0x61/0xe0 [ 700.472559][T17394] madvise_collapse+0x523/0xb70 [ 700.474845][T17426] do_fast_syscall_32+0x33/0x70 [ 700.482309][T17394] madvise_vma_behavior+0x200/0x1e50 [ 700.482340][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 700.493568][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 700.493605][T17426] page last free stack trace: [ 700.493610][T17426] free_unref_page_prepare+0x476/0xa40 [ 700.512157][T17394] do_madvise+0x333/0x660 [ 700.514434][T17426] free_unref_page+0x33/0x3b0 [ 700.521266][T17426] release_pages+0x51b/0x14e0 [ 700.525249][T17394] __ia32_sys_madvise+0xa8/0x110 [ 700.525948][T17426] __folio_batch_release+0x77/0xe0 [ 700.536044][T17426] shmem_undo_range+0x582/0x1040 [ 700.537480][T17394] __do_fast_syscall_32+0x61/0xe0 [ 700.547832][T17426] shmem_evict_inode+0x392/0xb50 [ 700.550450][T17394] do_fast_syscall_32+0x33/0x70 [ 700.552914][T17426] evict+0x2ed/0x6b0 [ 700.560229][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 700.565588][T17426] iput.part.0+0x55e/0x7a0 [ 700.570115][T17394] Modules linked in: [ 700.572389][T17426] iput+0x5c/0x80 [ 700.573027][T17394] [ 700.576293][T17426] dentry_unlink_inode+0x292/0x430 [ 700.576324][T17426] __dentry_kill+0x3b8/0x640 [ 700.580014][T17394] CPU: 0 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 700.590203][T17426] dput+0x8b7/0xf80 [ 700.591920][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 700.591934][T17394] Call Trace: [ 700.591941][T17394] [ 700.591948][T17394] dump_stack_lvl+0x125/0x1b0 [ 700.591974][T17394] bad_page+0xb4/0x200 [ 700.592005][T17394] ? folio_flags+0x120/0x120 [ 700.592035][T17394] ? page_bad_reason+0x9d/0x190 [ 700.592064][T17394] free_unref_page_prepare+0x827/0xa40 [ 700.592103][T17394] free_unref_page+0x33/0x3b0 [ 700.592127][T17394] release_pages+0x51b/0x14e0 [ 700.592154][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 700.592180][T17394] ? put_pages_list+0x570/0x570 08:44:18 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000400000/0x2000)=nil, 0x2000, 0xc) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) 08:44:18 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x17c800000000) 08:44:18 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) 08:44:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x500, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 700.592213][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 700.592244][T17394] __folio_batch_release+0x77/0xe0 [ 700.592273][T17394] shmem_undo_range+0x582/0x1040 [ 700.592311][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 700.592340][T17394] ? __orc_find+0x104/0x130 [ 700.592374][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 700.592411][T17394] ? write_profile+0x450/0x450 [ 700.592442][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 700.592471][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 700.592499][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 700.592536][T17394] shmem_evict_inode+0x392/0xb50 [ 700.592568][T17394] ? lock_acquire+0x464/0x510 [ 700.592598][T17394] ? shmem_truncate_range+0x80/0x80 [ 700.592627][T17394] ? lock_release+0x4bf/0x680 [ 700.592655][T17394] ? evict+0x2b7/0x6b0 [ 700.592685][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 700.592712][T17394] ? sugov_init+0x840/0x840 [ 700.592743][T17394] ? spin_bug+0x1d0/0x1d0 [ 700.592783][T17394] ? shmem_truncate_range+0x80/0x80 [ 700.592812][T17394] evict+0x2ed/0x6b0 [ 700.592843][T17394] iput.part.0+0x55e/0x7a0 [ 700.592875][T17394] ? __remove_inode_hash+0x130/0x130 [ 700.592906][T17394] iput+0x5c/0x80 [ 700.592935][T17394] dentry_unlink_inode+0x292/0x430 [ 700.592964][T17394] __dentry_kill+0x3b8/0x640 [ 700.592991][T17394] dput+0x8b7/0xf80 [ 700.593019][T17394] __fput+0x536/0xa70 [ 700.593050][T17394] task_work_run+0x14d/0x240 [ 700.593084][T17394] ? task_work_cancel+0x30/0x30 [ 700.593116][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 700.593152][T17394] do_exit+0xa92/0x2a20 08:44:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) sendfile(r1, r0, 0x0, 0x17c800000000) 08:44:18 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x600, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 700.593187][T17394] ? mm_update_next_owner+0x840/0x840 [ 700.593232][T17394] do_group_exit+0xd4/0x2a0 [ 700.593264][T17394] get_signal+0x23ba/0x2790 [ 700.593293][T17394] ? exit_signals+0x920/0x920 [ 700.593321][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 700.593354][T17394] ? get_sigframe_size+0x20/0x20 [ 700.593381][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 700.593415][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 700.593441][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 700.593472][T17394] asm_exc_page_fault+0x26/0x30 [ 700.593500][T17394] RIP: 0023:0x0 [ 700.593514][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 700.593522][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 700.593538][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 700.593550][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 700.593562][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 700.593575][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.593588][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.593609][T17394] [ 700.605941][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f776 [ 700.605961][T17394] page:ffffea0000bddd80 refcount:0 mapcount:1 mapping:0000000000000000 index:0x1 pfn:0x2f776 [ 700.605986][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 700.606002][T17394] page_type: 0x0() [ 700.606018][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 700.606036][T17394] raw: 0000000000000001 0000000000000000 0000000000000000 0000000000000000 [ 700.606047][T17394] page dumped because: nonzero mapcount [ 700.606056][T17394] page_owner tracks the page as allocated [ 700.606062][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 700.606096][T17394] post_alloc_hook+0x2cf/0x340 [ 700.606119][T17394] get_page_from_freelist+0xee0/0x2f20 08:44:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x700, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 700.606139][T17394] __alloc_pages+0x1d0/0x4a0 [ 700.606159][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 700.606181][T17394] collapse_file+0x20c/0x5720 [ 700.606218][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 700.606243][T17394] madvise_collapse+0x523/0xb70 [ 700.606269][T17394] madvise_vma_behavior+0x200/0x1e50 [ 700.606294][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 700.606317][T17394] do_madvise+0x333/0x660 [ 700.606341][T17394] __ia32_sys_madvise+0xa8/0x110 [ 700.606365][T17394] __do_fast_syscall_32+0x61/0xe0 [ 700.606388][T17394] do_fast_syscall_32+0x33/0x70 [ 700.606409][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 700.606440][T17394] page last free stack trace: [ 700.606445][T17394] free_unref_page_prepare+0x476/0xa40 [ 700.606477][T17394] free_unref_page+0x33/0x3b0 [ 700.606496][T17394] __folio_put+0xeb/0x110 [ 700.606518][T17394] put_page+0x21e/0x280 [ 700.606537][T17394] collapse_file+0x1147/0x5720 [ 700.637260][T17426] __fput+0x536/0xa70 [ 701.126400][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 701.245188][T17426] task_work_run+0x14d/0x240 [ 701.249936][T17426] do_exit+0xa92/0x2a20 [ 701.257538][T17426] do_group_exit+0xd4/0x2a0 [ 701.264314][T17426] Modules linked in: [ 701.268335][T17426] CPU: 0 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 701.280251][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 701.290320][T17426] Call Trace: [ 701.293608][T17426] [ 701.296553][T17426] dump_stack_lvl+0x125/0x1b0 [ 701.301249][T17426] bad_page+0xb4/0x200 [ 701.305345][T17426] ? folio_flags+0x120/0x120 [ 701.309959][T17426] ? page_bad_reason+0x9d/0x190 [ 701.314835][T17426] free_unref_page_prepare+0x827/0xa40 [ 701.320332][T17426] free_unref_page+0x33/0x3b0 [ 701.325027][T17426] release_pages+0x51b/0x14e0 [ 701.329721][T17426] ? mlock_drain_local+0x22e/0x4f0 [ 701.334846][T17426] ? put_pages_list+0x570/0x570 [ 701.339710][T17426] ? spin_bug+0x1d0/0x1d0 [ 701.344071][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 701.349208][T17426] __folio_batch_release+0x77/0xe0 [ 701.354512][T17426] shmem_undo_range+0x582/0x1040 [ 701.359479][T17426] ? shmem_get_partial_folio+0x330/0x330 [ 701.365220][T17426] ? __orc_find+0x104/0x130 [ 701.369745][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 701.375149][T17426] ? write_profile+0x450/0x450 [ 701.379936][T17426] ? is_bpf_text_address+0x94/0x1a0 [ 701.385151][T17426] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 701.391238][T17426] ? percpu_counter_add_batch+0x132/0x1f0 [ 701.396984][T17426] shmem_evict_inode+0x392/0xb50 [ 701.401945][T17426] ? lock_acquire+0x464/0x510 [ 701.406646][T17426] ? shmem_truncate_range+0x80/0x80 [ 701.411866][T17426] ? lock_release+0x4bf/0x680 [ 701.416650][T17426] ? evict+0x2b7/0x6b0 [ 701.420740][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 701.423269][T17394] madvise_collapse+0x523/0xb70 [ 701.426208][T17426] ? sugov_init+0x840/0x840 [ 701.435348][T17394] madvise_vma_behavior+0x200/0x1e50 [ 701.435522][T17426] ? spin_bug+0x1d0/0x1d0 [ 701.440806][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 701.445439][T17426] ? shmem_truncate_range+0x80/0x80 [ 701.450385][T17394] do_madvise+0x333/0x660 [ 701.455628][T17426] evict+0x2ed/0x6b0 [ 701.459930][T17394] __ia32_sys_madvise+0xa8/0x110 [ 701.463807][T17426] iput.part.0+0x55e/0x7a0 [ 701.468737][T17394] __do_fast_syscall_32+0x61/0xe0 [ 701.473126][T17426] ? __remove_inode_hash+0x130/0x130 [ 701.473156][T17426] iput+0x5c/0x80 [ 701.473183][T17426] dentry_unlink_inode+0x292/0x430 [ 701.478203][T17394] do_fast_syscall_32+0x33/0x70 [ 701.483465][T17426] __dentry_kill+0x3b8/0x640 [ 701.487098][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 701.492184][T17426] dput+0x8b7/0xf80 [ 701.497020][T17394] Modules linked in: [ 701.501580][T17426] __fput+0x536/0xa70 [ 701.507906][T17394] [ 701.522134][T17426] task_work_run+0x14d/0x240 [ 701.526763][T17426] ? task_work_cancel+0x30/0x30 [ 701.531643][T17426] ? do_raw_spin_unlock+0x173/0x230 [ 701.536865][T17426] do_exit+0xa92/0x2a20 [ 701.541040][T17426] ? mm_update_next_owner+0x840/0x840 [ 701.546618][T17426] do_group_exit+0xd4/0x2a0 [ 701.551152][T17426] get_signal+0x23ba/0x2790 [ 701.555685][T17426] ? exit_signals+0x920/0x920 [ 701.560556][T17426] arch_do_signal_or_restart+0x90/0x7f0 [ 701.566218][T17426] ? get_sigframe_size+0x20/0x20 [ 701.571182][T17426] ? __bad_area_nosemaphore+0x325/0x6a0 [ 701.576751][T17426] exit_to_user_mode_prepare+0x11f/0x240 [ 701.582426][T17426] irqentry_exit_to_user_mode+0x9/0x40 [ 701.587920][T17426] asm_exc_page_fault+0x26/0x30 [ 701.592796][T17426] RIP: 0023:0x0 [ 701.596275][T17426] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 701.603743][T17426] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 701.609820][T17426] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 701.617803][T17426] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 701.625873][T17426] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 701.633945][T17426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 701.642112][T17426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.650158][T17426] [ 701.653181][T17394] CPU: 1 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 701.665090][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 701.675224][T17394] Call Trace: [ 701.678495][T17394] [ 701.681415][T17394] dump_stack_lvl+0x125/0x1b0 [ 701.686092][T17394] bad_page+0xb4/0x200 [ 701.690166][T17394] ? folio_flags+0x120/0x120 [ 701.694763][T17394] ? page_bad_reason+0x9d/0x190 [ 701.699617][T17394] free_unref_page_prepare+0x827/0xa40 [ 701.705110][T17394] free_unref_page+0x33/0x3b0 [ 701.709788][T17394] release_pages+0x51b/0x14e0 [ 701.714466][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 701.719573][T17394] ? put_pages_list+0x570/0x570 [ 701.724423][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 701.729534][T17394] __folio_batch_release+0x77/0xe0 [ 701.734644][T17394] shmem_undo_range+0x582/0x1040 [ 701.739759][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 701.745389][T17394] ? __orc_find+0x104/0x130 [ 701.749901][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 701.755274][T17394] ? write_profile+0x450/0x450 [ 701.760053][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 701.765349][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 701.771337][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 701.777074][T17394] shmem_evict_inode+0x392/0xb50 [ 701.782021][T17394] ? lock_acquire+0x464/0x510 [ 701.786699][T17394] ? shmem_truncate_range+0x80/0x80 [ 701.791897][T17394] ? lock_release+0x4bf/0x680 [ 701.796574][T17394] ? evict+0x2b7/0x6b0 [ 701.800642][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 701.806013][T17394] ? sugov_init+0x840/0x840 [ 701.810516][T17394] ? spin_bug+0x1d0/0x1d0 [ 701.814848][T17394] ? shmem_truncate_range+0x80/0x80 [ 701.820049][T17394] evict+0x2ed/0x6b0 [ 701.823961][T17394] iput.part.0+0x55e/0x7a0 [ 701.828378][T17394] ? __remove_inode_hash+0x130/0x130 [ 701.833663][T17394] iput+0x5c/0x80 [ 701.837299][T17394] dentry_unlink_inode+0x292/0x430 [ 701.842408][T17394] __dentry_kill+0x3b8/0x640 [ 701.846998][T17394] dput+0x8b7/0xf80 [ 701.850802][T17394] __fput+0x536/0xa70 [ 701.854783][T17394] task_work_run+0x14d/0x240 [ 701.859375][T17394] ? task_work_cancel+0x30/0x30 [ 701.864250][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 701.869468][T17394] do_exit+0xa92/0x2a20 [ 701.873639][T17394] ? mm_update_next_owner+0x840/0x840 [ 701.879027][T17394] do_group_exit+0xd4/0x2a0 [ 701.883545][T17394] get_signal+0x23ba/0x2790 [ 701.888056][T17394] ? exit_signals+0x920/0x920 [ 701.892731][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 701.898367][T17394] ? get_sigframe_size+0x20/0x20 [ 701.903300][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 701.908845][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 701.914471][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 701.919930][T17394] asm_exc_page_fault+0x26/0x30 [ 701.924779][T17394] RIP: 0023:0x0 [ 701.928229][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 701.935585][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 701.941642][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 701.949601][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 701.957562][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 701.965525][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.973489][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.981480][T17394] [ 702.021415][T17394] BUG: Bad page state in process syz-executor.1 pfn:2f777 [ 702.030351][T17394] page:ffffea0000bdddc0 refcount:0 mapcount:1 mapping:0000000000000000 index:0x1 pfn:0x2f777 [ 702.046385][T17394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 702.053972][T17394] page_type: 0x0() [ 702.057850][T17394] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 702.067155][T17394] raw: 0000000000000001 0000000000000000 0000000000000000 0000000000000000 [ 702.076198][T17394] page dumped because: nonzero mapcount [ 702.082307][T17394] page_owner tracks the page as allocated [ 702.088551][T17394] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17388, tgid 17384 (syz-executor.1), ts 692426027496, free_ts 690647077734 [ 702.094217][T17426] BUG: Bad page state in process syz-executor.1 pfn:37773 [ 702.108075][T17394] post_alloc_hook+0x2cf/0x340 [ 702.154307][T17426] page:ffffea0000dddcc0 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x1 pfn:0x37773 [ 702.164670][T17394] get_page_from_freelist+0xee0/0x2f20 [ 702.177191][T17394] __alloc_pages+0x1d0/0x4a0 [ 702.184072][T17426] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 702.204753][T17394] alloc_charge_hpage+0x2ba/0xbd0 [ 702.224083][T17426] page_type: 0xfffffffe() [ 702.225648][T17394] collapse_file+0x20c/0x5720 [ 702.233147][T17426] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 702.254366][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 702.262919][T17426] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 702.265521][T17394] madvise_collapse+0x523/0xb70 [ 702.271909][T17426] page dumped because: nonzero mapcount [ 702.282353][T17426] page_owner tracks the page as allocated [ 702.288136][T17426] page last allocated via order 9, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 17421, tgid 17412 (syz-executor.1), ts 695110086376, free_ts 654623168169 [ 702.290319][T17394] madvise_vma_behavior+0x200/0x1e50 [ 702.305360][T17426] post_alloc_hook+0x2cf/0x340 [ 702.315409][T17426] get_page_from_freelist+0xee0/0x2f20 [ 702.321145][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 702.321174][T17394] do_madvise+0x333/0x660 [ 702.321198][T17394] __ia32_sys_madvise+0xa8/0x110 [ 702.321223][T17394] __do_fast_syscall_32+0x61/0xe0 [ 702.321247][T17394] do_fast_syscall_32+0x33/0x70 [ 702.321267][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 702.346184][T17426] __alloc_pages+0x1d0/0x4a0 [ 702.354600][T17394] page last free stack trace: [ 702.359770][T17426] alloc_charge_hpage+0x2ba/0xbd0 [ 702.367328][T17394] free_unref_page_prepare+0x476/0xa40 [ 702.368849][T17426] collapse_file+0x20c/0x5720 [ 702.373895][T17394] free_unref_page+0x33/0x3b0 [ 702.378958][T17426] hpage_collapse_scan_file+0x6fa/0x16b0 [ 702.383239][T17394] __folio_put+0xeb/0x110 [ 702.383264][T17394] put_page+0x21e/0x280 [ 702.383285][T17394] collapse_file+0x1147/0x5720 [ 702.389516][T17426] madvise_collapse+0x523/0xb70 [ 702.405306][T17394] hpage_collapse_scan_file+0x6fa/0x16b0 [ 702.407479][T17426] madvise_vma_behavior+0x200/0x1e50 [ 702.417964][T17394] madvise_collapse+0x523/0xb70 [ 702.417999][T17394] madvise_vma_behavior+0x200/0x1e50 [ 702.423372][T17426] madvise_walk_vmas+0x1cf/0x2c0 [ 702.432378][T17394] madvise_walk_vmas+0x1cf/0x2c0 [ 702.437644][T17426] do_madvise+0x333/0x660 [ 702.440793][T17394] do_madvise+0x333/0x660 [ 702.443179][T17426] __ia32_sys_madvise+0xa8/0x110 [ 702.447116][T17394] __ia32_sys_madvise+0xa8/0x110 [ 702.458473][T17426] __do_fast_syscall_32+0x61/0xe0 [ 702.459914][T17394] __do_fast_syscall_32+0x61/0xe0 [ 702.464091][T17426] do_fast_syscall_32+0x33/0x70 [ 702.468605][T17394] do_fast_syscall_32+0x33/0x70 [ 702.468628][T17394] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 702.479539][T17426] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 702.484726][T17394] Modules linked in: [ 702.495070][T17394] CPU: 1 PID: 17394 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 702.495399][T17426] page last free stack trace: [ 702.506954][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 702.506966][T17394] Call Trace: [ 702.506975][T17394] [ 702.506990][T17394] dump_stack_lvl+0x125/0x1b0 [ 702.507017][T17394] bad_page+0xb4/0x200 [ 702.516556][T17426] free_unref_page_prepare+0x476/0xa40 [ 702.521718][T17394] ? folio_flags+0x120/0x120 [ 702.521747][T17394] ? page_bad_reason+0x9d/0x190 [ 702.521775][T17394] free_unref_page_prepare+0x827/0xa40 [ 702.525605][T17426] free_unref_page+0x33/0x3b0 [ 702.527968][T17394] free_unref_page+0x33/0x3b0 [ 702.538169][T17426] release_pages+0x51b/0x14e0 [ 702.542137][T17394] release_pages+0x51b/0x14e0 [ 702.542166][T17394] ? mlock_drain_local+0x22e/0x4f0 [ 702.542192][T17394] ? put_pages_list+0x570/0x570 [ 702.542218][T17394] ? lru_add_drain_cpu+0x455/0x850 [ 702.542249][T17394] __folio_batch_release+0x77/0xe0 [ 702.542278][T17394] shmem_undo_range+0x582/0x1040 [ 702.542316][T17394] ? shmem_get_partial_folio+0x330/0x330 [ 702.542347][T17394] ? __orc_find+0x104/0x130 [ 702.542380][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 702.542416][T17394] ? write_profile+0x450/0x450 [ 702.554945][T17426] __folio_batch_release+0x77/0xe0 [ 702.557398][T17394] ? is_bpf_text_address+0x94/0x1a0 [ 702.564778][T17426] shmem_undo_range+0x582/0x1040 [ 702.566717][T17394] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 702.575835][T17426] shmem_evict_inode+0x392/0xb50 [ 702.576030][T17394] ? percpu_counter_add_batch+0x132/0x1f0 [ 702.581622][T17426] evict+0x2ed/0x6b0 [ 702.585992][T17394] shmem_evict_inode+0x392/0xb50 [ 702.595823][T17426] iput.part.0+0x55e/0x7a0 [ 702.596189][T17394] ? lock_acquire+0x464/0x510 [ 702.601684][T17426] iput+0x5c/0x80 [ 702.606771][T17394] ? shmem_truncate_range+0x80/0x80 [ 702.606810][T17394] ? lock_release+0x4bf/0x680 [ 702.616058][T17426] dentry_unlink_inode+0x292/0x430 [ 702.616647][T17394] ? evict+0x2b7/0x6b0 [ 702.621838][T17426] __dentry_kill+0x3b8/0x640 [ 702.626484][T17394] ? reacquire_held_locks+0x4b0/0x4b0 [ 702.636364][T17426] dput+0x8b7/0xf80 [ 702.636580][T17394] ? sugov_init+0x840/0x840 [ 702.644653][T17426] __fput+0x536/0xa70 [ 702.647547][T17394] ? spin_bug+0x1d0/0x1d0 [ 702.660324][T17426] task_work_run+0x14d/0x240 [ 702.662156][T17394] ? shmem_truncate_range+0x80/0x80 [ 702.666586][T17426] do_exit+0xa92/0x2a20 [ 702.671195][T17394] evict+0x2ed/0x6b0 [ 702.671229][T17394] iput.part.0+0x55e/0x7a0 [ 702.671258][T17394] ? __remove_inode_hash+0x130/0x130 [ 702.671287][T17394] iput+0x5c/0x80 [ 702.671316][T17394] dentry_unlink_inode+0x292/0x430 [ 702.671345][T17394] __dentry_kill+0x3b8/0x640 [ 702.671374][T17394] dput+0x8b7/0xf80 [ 702.671402][T17394] __fput+0x536/0xa70 [ 702.671439][T17394] task_work_run+0x14d/0x240 [ 702.671472][T17394] ? task_work_cancel+0x30/0x30 [ 702.671504][T17394] ? do_raw_spin_unlock+0x173/0x230 [ 702.671541][T17394] do_exit+0xa92/0x2a20 [ 702.671576][T17394] ? mm_update_next_owner+0x840/0x840 [ 702.671614][T17394] do_group_exit+0xd4/0x2a0 [ 702.671648][T17394] get_signal+0x23ba/0x2790 [ 702.671674][T17394] ? exit_signals+0x920/0x920 [ 702.671703][T17394] arch_do_signal_or_restart+0x90/0x7f0 [ 702.671735][T17394] ? get_sigframe_size+0x20/0x20 [ 702.671763][T17394] ? __bad_area_nosemaphore+0x325/0x6a0 [ 702.684486][T17426] do_group_exit+0xd4/0x2a0 [ 702.685311][T17394] exit_to_user_mode_prepare+0x11f/0x240 [ 702.693436][T17426] Modules linked in: [ 702.694437][T17394] irqentry_exit_to_user_mode+0x9/0x40 [ 702.698998][T17426] [ 702.845436][T17394] asm_exc_page_fault+0x26/0x30 [ 702.850313][T17394] RIP: 0023:0x0 [ 702.853818][T17394] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 702.861196][T17394] RSP: 002b:0000000020000040 EFLAGS: 00010202 [ 702.867284][T17394] RAX: 0000000000000000 RBX: 0000000000000400 RCX: 00000000000000ae [ 702.875259][T17394] RDX: 00000000d6d40b35 RSI: 0000000020000180 RDI: 00000000200001c0 [ 702.883233][T17394] RBP: 00000000c3c34282 R08: 0000000000000000 R09: 0000000000000000 [ 702.891240][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.899480][T17394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.907467][T17394] 08:44:21 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfdfff014}, {0x6}]}, 0x8) fcntl$dupfd(r3, 0x0, r4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0) 08:44:21 executing program 2: timerfd_settime(0xffffffffffffffff, 0x7a38ebaaa7d02445, 0x0, 0x0) 08:44:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0xb00, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) 08:44:21 executing program 5: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 08:44:21 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x200}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="07001f0a000000000000aaaaaaaa12aaaaaaaaaaffffffffffff00d87a9700000000000000"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x804}}}, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1608d87, 0x4, 0x14001, 0x10000, 0x8000, 0x9, 0x759, 0x7, 0xffffffff, 0x1ff, 0x13, 0x2000000000000006, 0x10001, 0xfffffffffffff924, 0xffffffffffffffff], 0x100000, 0x44080}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="04042caaaaaaaaaa1206d5cc01cbe64fa0b944d5c1b1eac39dc2dce51d4d0ed36a7b723ddfaa8d3a6d73a9578ba757790fd9c45ebcf5259cff7bd0db86f558b708be6053ac7c8c464ee85fc58f2525aaaa6cfa043266dfb18ca66965e6b8552e8fed7539aeacf495c2e281eb5d73"], 0xd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xdc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x287, @tick, 0xfe}) r5 = open(&(0x7f0000000280)='./bus\x00', 0x14fa42, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @rand_addr, @initdev}, &(0x7f0000001600)=0xfffffffffffffefc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x40, 0x2, 0x0, {0x6, 0x8}, 0x9d, 0x1ff}) syz_clone3(&(0x7f0000001400)={0x8000100, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000002c0), {0x40}, &(0x7f0000000300)=""/154, 0x9a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) socketpair(0x2, 0x800, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000200000000000000", @ANYRES32, @ANYBLOB="b1000000cd13887d280012000e00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 08:44:21 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000400000/0x2000)=nil, 0x2000, 0xc) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) (async) madvise(&(0x7f0000400000/0x2000)=nil, 0x2000, 0xc) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) (async) [ 702.943535][T17426] CPU: 0 PID: 17426 Comm: syz-executor.1 Tainted: G B 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 702.955476][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 702.965636][T17426] Call Trace: [ 702.968933][T17426] [ 702.971887][T17426] dump_stack_lvl+0x125/0x1b0 [ 702.976589][T17426] bad_page+0xb4/0x200 [ 702.980686][T17426] ? folio_flags+0x120/0x120 [ 702.985307][T17426] ? page_bad_reason+0x9d/0x190 08:44:21 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x1f00, @loopback, @loopback}, "fa17637100001d03"}}}}}, 0x0) [ 702.990188][T17426] free_unref_page_prepare+0x827/0xa40 [ 702.995684][T17426] free_unref_page+0x33/0x3b0 [ 703.000444][T17426] release_pages+0x51b/0x14e0 [ 703.005215][T17426] ? mlock_drain_local+0x22e/0x4f0 [ 703.010351][T17426] ? put_pages_list+0x570/0x570 [ 703.015226][T17426] ? spin_bug+0x1d0/0x1d0 [ 703.019582][T17426] ? lru_add_drain_cpu+0x455/0x850 [ 703.024727][T17426] __folio_batch_release+0x77/0xe0 [ 703.029867][T17426] shmem_undo_range+0x582/0x1040 [ 703.034842][T17426] ? shmem_get_partial_folio+0x330/0x330 [ 703.040528][T17426] ? __orc_find+0x104/0x130 [ 703.045081][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 703.050488][T17426] ? write_profile+0x450/0x450 [ 703.055284][T17426] ? is_bpf_text_address+0x94/0x1a0 [ 703.060505][T17426] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 703.066507][T17426] ? percpu_counter_add_batch+0x132/0x1f0 [ 703.072262][T17426] shmem_evict_inode+0x392/0xb50 [ 703.077234][T17426] ? lock_acquire+0x464/0x510 [ 703.081921][T17426] ? shmem_truncate_range+0x80/0x80 [ 703.087135][T17426] ? lock_release+0x4bf/0x680 [ 703.091837][T17426] ? evict+0x2b7/0x6b0 [ 703.095923][T17426] ? reacquire_held_locks+0x4b0/0x4b0 [ 703.101294][T17426] ? sugov_init+0x840/0x840 [ 703.105813][T17426] ? spin_bug+0x1d0/0x1d0 [ 703.110145][T17426] ? shmem_truncate_range+0x80/0x80 [ 703.115381][T17426] evict+0x2ed/0x6b0 [ 703.119303][T17426] iput.part.0+0x55e/0x7a0 [ 703.123743][T17426] ? __remove_inode_hash+0x130/0x130 [ 703.129046][T17426] iput+0x5c/0x80 [ 703.132681][T17426] dentry_unlink_inode+0x292/0x430 [ 703.137784][T17426] __dentry_kill+0x3b8/0x640 [ 703.142461][T17426] dput+0x8b7/0xf80 [ 703.146290][T17426] __fput+0x536/0xa70 [ 703.150294][T17426] task_work_run+0x14d/0x240 [ 703.154914][T17426] ? task_work_cancel+0x30/0x30 [ 703.159788][T17426] ? do_raw_spin_unlock+0x173/0x230 [ 703.165004][T17426] do_exit+0xa92/0x2a20 [ 703.169159][T17426] ? mm_update_next_owner+0x840/0x840 [ 703.174647][T17426] do_group_exit+0xd4/0x2a0 [ 703.179325][T17426] get_signal+0x23ba/0x2790 [ 703.183822][T17426] ? exit_signals+0x920/0x920 [ 703.188492][T17426] arch_do_signal_or_restart+0x90/0x7f0