[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   64.349141] audit: type=1800 audit(1546188054.402:25): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   64.368786] audit: type=1800 audit(1546188054.412:26): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   64.388138] audit: type=1800 audit(1546188054.422:27): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts.
2018/12/30 16:41:08 fuzzer started
syzkaller login: [   81.019054] as (9834) used greatest stack depth: 53728 bytes left
2018/12/30 16:41:12 dialing manager at 10.128.0.26:36695
2018/12/30 16:41:12 syscalls: 1
2018/12/30 16:41:12 code coverage: enabled
2018/12/30 16:41:12 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/30 16:41:12 setuid sandbox: enabled
2018/12/30 16:41:12 namespace sandbox: enabled
2018/12/30 16:41:12 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/30 16:41:12 fault injection: enabled
2018/12/30 16:41:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/30 16:41:12 net packet injection: enabled
2018/12/30 16:41:12 net device setup: enabled
16:43:28 executing program 0:

[  219.161213] IPVS: ftp: loaded support on port[0] = 21
[  219.280084] chnl_net:caif_netlink_parms(): no params data found
[  219.336755] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.343291] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.351193] device bridge_slave_0 entered promiscuous mode
[  219.359937] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.366472] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.374416] device bridge_slave_1 entered promiscuous mode
[  219.401564] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  219.412757] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  219.438124] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  219.446277] team0: Port device team_slave_0 added
[  219.452553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  219.460684] team0: Port device team_slave_1 added
[  219.466793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  219.474978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  219.646227] device hsr_slave_0 entered promiscuous mode
[  219.792246] device hsr_slave_1 entered promiscuous mode
[  219.943178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  219.950646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  219.974451] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.981026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.988053] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.994549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.061731] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  220.067858] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.079831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  220.091318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.101445] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.110491] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.120991] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  220.136973] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  220.143252] 8021q: adding VLAN 0 to HW filter on device team0
[  220.156897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.165260] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.171774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.186403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.194704] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.201151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.247460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.256438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.264928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  220.272972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  220.285771] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  220.291919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  220.311740] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  220.324614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  220.336530] 8021q: adding VLAN 0 to HW filter on device batadv0
16:43:30 executing program 0:

16:43:30 executing program 0:

16:43:30 executing program 0:
request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000680)={'syz'}, 0x0, 0x0)

16:43:30 executing program 0:
request_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000680)={'syz'}, 0x0, 0x0)

16:43:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  220.913888] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
16:43:31 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x24180)
read(r0, &(0x7f0000000200)=""/30, 0xfffffe80)

16:43:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0xa3c, &(0x7f0000409000)=<r2=>0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x2, r1})
read(r1, &(0x7f00000000c0)=""/81, 0x51)
read$eventfd(r1, &(0x7f0000000140), 0x8)
io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])

16:43:31 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x401, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x8a)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {<r2=>0x0}, {}]})
r3 = add_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$set_timeout(0xf, r3, 0x20)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x80000000, 0xb5f, 0x0]}, &(0x7f0000000240)=0xa)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={<r4=>0x0, 0x7}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r4, 0x3}, 0x8)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r5 = accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0x80000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000003c0)={<r7=>r4, 0xf5, "fbdf583e12ed10d5870e2611830cf7a282e29601cc58100f3ab456df0d10768edcbfc979ac52b90a9f37ee198de11bfc5058f3bf87692675ba52f7ac650494002b309c0b8ff98895d29f555f9e7003265bf24d8cfeb423967a44b7ffc7db9dde85e92d12b6f9089f4543651795723537aace00b4a0529f320bd6d58f603ad7568223669aa4afaa4319fd239aae89dd5e7383d62f7155bcba673ec32644c725d43fe8a52691df15ae0d4ae772a82ad39cadcd463b755fb09497ce5517d7122abe0e13fd2ff70ce2d95b99cc0eb85b04b0b6637bfe9244a9eb9958844fb6547ab42eabdf7ce96dbc26ca30872402d54c7f72eabe118c"}, &(0x7f00000004c0)=0xfd)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e21, 0x0, @mcast1, 0x3}, {0xa, 0x4e24, 0x3f, @mcast1, 0x4}, 0x3, [0xfffffffffffffc01, 0x6, 0x3f, 0x8, 0x0, 0x4, 0x8]}, 0x5c)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000580)={0x0, 0x6, 0x1000, 'queue1\x00', 0x10001})
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000680)='team\x00')
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4c000}, 0xc, &(0x7f0000001280)={&(0x7f00000006c0)={0xb98, r8, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x1a8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffb7a}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x6154, 0x3, 0x0, 0xff}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1d637379}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x138, 0x2, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0xd4, 0x9, 0x2}, {0xeb0, 0x1f, 0x3, 0x7}, {0x2, 0x6, 0x6, 0xdd}, {0x7, 0x7ff, 0x4, 0x7f}, {0x5, 0x7fff, 0x5, 0x5}, {0x400, 0x1, 0x100000000, 0x4}, {0x4, 0x2, 0xf68, 0xffff}, {0x7, 0x0, 0x1, 0x744}, {0x0, 0x100000000, 0xba, 0x6d7f}, {0xffffffffffffff01, 0x3ff, 0x7, 0x7ff}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r6}, {0x224, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8, 0x7, 0x54}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r6}, {0x22c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8000, 0x0, 0x2, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xf1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0xb98}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001300)={r7, 0x1000}, 0x8)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000001340)=0x33fb, 0x4)
setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000001380)=0x8, 0x4)
ioctl$VT_WAITACTIVE(r0, 0x5607)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000001440)={0x4, 0x3, 0x6a, &(0x7f00000013c0)="215676be01442d2c70126e5e4b972b88b79ca8e8220151d7233076e901a40f3989cc106f80f4c25ecb42e60c01e13ce9e81cbf77817a9448f2ac138eae204747b2eeb8037b228d2168fe020626600cbd1d7d7b7179bee4baa16b268245ac579b19f11a0127835e8d2971"})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000001480)={r2, 0x2})
syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001540)=[@text16={0x10, &(0x7f00000014c0)="66b8e057ec840f23d80f21f86635000000000f23f8b895000f00d00f0175526766c7442400bf623a716766c7442402c20000006766c744240600000000670f011c240f01bbaacf3e0fb169b366b9920200000f32ba2000ed0f20d86635200000000f22d8baf80c66b8181ee48f66efbafc0c66b8ec57000066ef", 0x7a}], 0x1, 0x1, &(0x7f0000001580)=[@cstype0={0x4, 0xc}], 0x1)
ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000015c0))
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000001600)={{0xa, 0x4e23, 0x3f, @loopback, 0x1}, {0xa, 0x4e22, 0xfff}, 0x8, [0x3, 0xfffffffffffffff9, 0x1, 0x1, 0x4, 0x6, 0x9, 0x9]}, 0x5c)
renameat(r0, &(0x7f0000001680)='./file0\x00', r0, &(0x7f00000016c0)='./file0\x00')
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x22)
ioctl$VT_WAITACTIVE(r0, 0x5607)
ioctl$UI_DEV_CREATE(r1, 0x5501)

[  221.935640] IPVS: ftp: loaded support on port[0] = 21
[  222.067078] chnl_net:caif_netlink_parms(): no params data found
[  222.129751] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.136337] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.144385] device bridge_slave_0 entered promiscuous mode
[  222.153105] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.159558] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.167644] device bridge_slave_1 entered promiscuous mode
16:43:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0xa3c, &(0x7f0000409000)=<r2=>0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x2, r1})
read(r1, &(0x7f00000000c0)=""/81, 0x51)
read$eventfd(r1, &(0x7f0000000140), 0x8)
io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])

[  222.197075] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  222.207634] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  222.247714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  222.256425] team0: Port device team_slave_0 added
[  222.272772] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  222.280902] team0: Port device team_slave_1 added
[  222.287783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  222.296049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  222.387246] device hsr_slave_0 entered promiscuous mode
[  222.552303] device hsr_slave_1 entered promiscuous mode
[  222.712835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  222.720199] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  222.744845] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.751351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.758392] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.764999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.833052] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  222.839186] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.851544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  222.863853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.875256] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.883878] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.895437] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  222.910567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  222.916802] 8021q: adding VLAN 0 to HW filter on device team0
[  222.930830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.939276] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.945797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.994345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.004248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.015341] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  223.025216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.033430] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.039885] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.048926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  223.057753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  223.066158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.074536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.094332] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  223.109148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.128730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  223.136212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
16:43:33 executing program 0:
seccomp(0x1, 0xfffffffffffffffd, &(0x7f0000000100)={0x0, &(0x7f0000000180)})
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0)
exit(0x3)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)

16:43:33 executing program 1:
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f000000db00)=[{{0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000009dc0)}}, {{&(0x7f000000bf40)=@vsock={0x1e, 0x0, 0x0, @my}, 0x80, &(0x7f000000c440), 0x0, &(0x7f000000c4c0)}}], 0x2, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x401, 0x0, 0x0, 0x4, 0x8, {0x9, 0xc4}, 0x1})
r2 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x34, 0x37, 0x2, {0x1, 0x8828, 0x4, r2, 0x16, '/proc/capi/capi20ncci\x00'}}, 0x34)

16:43:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070")
r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x21, &(0x7f0000ad2000), &(0x7f0000000080)=0x4)

16:43:33 executing program 1:
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'team_slave_0\x00', @ifru_settings={0x0, 0x5, @cisco=0x0}})
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000))

16:43:33 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x900c0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x7, @time={0x77359400}, {0x479d}, {0x800, 0x10000}, @ext={0x4c, &(0x7f0000000100)="c91f450c31dea851ce59481cb615bde32046d3bb88e020de856fc30f982bb9777b6bd25311e947491f11554a3147cb348f9a20fc567ba17732baf12b90a2fbc3bc0a38f677fb7f24abbe059a"}}, {0x81, 0x1, 0x5bcb, 0x8001, @tick=0x7861, {0x800, 0x100000000}, {0x5, 0x8}, @queue={0x7f, {0x9, 0x41}}}, {0x10000, 0x6, 0x5e9d, 0x6, @time, {0x1, 0x480}, {0x0, 0x2}, @time=@tick=0x5}, {0x7, 0x6, 0xec, 0x4, @time={0x0, 0x989680}, {0x1, 0x6}, {}, @note={0x10000, 0x2, 0x6b, 0x800, 0xfffffffffffffffe}}], 0xc0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x80003, 0xff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000380)={0xc1b, 0x7f, 0xd2, 'queue1\x00', 0x3})
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0xffffffa4, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000440)={{0xbe, @multicast2, 0x4e20, 0x4, 'lblc\x00', 0x1, 0x5, 0x30}, {@local, 0x4e20, 0x2004, 0x1f, 0xc000000000000, 0x8}}, 0x44)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042bbd7000ffdbdf25030000000c0004001604000000ab00000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x4)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

16:43:33 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x80082)
r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x101000)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[  223.652801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'.
16:43:33 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
fcntl$setflags(r0, 0x2, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080))
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300098417feb1ae7aa778f40000ff3f0e000000000000000000001419000200430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x420000, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x2, 0x4000003f, 0x2, 0x3})
fchdir(r1)

16:43:33 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000fc0)=""/229, 0xe5}], 0x2}}], 0x1, 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2c0)
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x9, 0x6, 0x1})
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
connect$inet(r1, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000080)=0x8, 0x4)
sendmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'ip6erspan0\x00', 0x7})

[  223.951840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
16:43:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x401, 0x0)
write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @ipv4={{0x13, 0x4, 0x7, 0x6, 0x54, 0x65, 0xffff, 0x5, 0x7f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, {[@ra={0x94, 0x6, 0x1}, @ssrr={0x89, 0xf, 0x3ff, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0x20, 0x6, 0xd5d612c76eea9e86, 0x8b, [{[], 0x9}, {[@empty], 0x3}, {[@remote], 0xc4}, {[@local]}]}, @noop]}}, @icmp=@address_request={0x11, 0x0, 0x0, 0x6}}}, 0x58)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x60000000080ffff, [0xc0000103, 0x0, 0x4b564d00], [0xc2]})

[  224.089886] kvm [9915]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
16:43:34 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xa, 0x4, 0x8})
r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000006, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000200)={0x3, @output})
fadvise64(r1, 0x4, 0x20000037a3, 0x800000000000)

16:43:34 executing program 0:
r0 = open(&(0x7f0000000280)='./file0\x00', 0x50400, 0x82)
getsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1800}, 0x18)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0xfff, 0x4)

16:43:34 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, {0x3014}})
geteuid()
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x1f41, [0x5, 0x8, 0x3f, 0x1ff, 0xf92, 0x7f9, 0x8, 0x400, 0x7, 0x9, 0x7ff8000, 0x9, 0x81, 0x100000001, 0x7fff, 0x1, 0x10001, 0x3, 0xfffffffffffff000, 0xc8, 0x7, 0x207, 0x5, 0x8, 0x2, 0x1, 0x1000, 0x40, 0xca5, 0x7, 0x6, 0x2, 0x6ed, 0xfffffffffffffeff, 0x3f, 0x81, 0x3f, 0x7, 0x7fff, 0x5, 0x2, 0x6, 0x3, 0xe99, 0x4, 0x7, 0xff, 0x11], 0x2})

16:43:34 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = dup(r0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4)
write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18}, 0x18)
sendmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='Z', 0x1}], 0x1}}], 0x1, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x49cedf57, "90509cf8561f80239386613e1d88f4dbe8e986bf5edafd8ce576c05827ca5179", 0x1, 0x8b0, 0x3, 0x400, 0x10, 0x2, 0xfffffffffffff800, 0x4000000000000000})
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0)
sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="b4", 0x1}], 0x1}}], 0x1, 0x4000095)

16:43:34 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/sequencer2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000a}, {}, 0xfffffffffffffffe})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1})
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x82, 0x0, 0x7}}, 0x14)

16:43:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = memfd_create(&(0x7f0000000140)='/d-\x1b\xb3\x82t\xceh\xe9\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\xc17\xc4\f\xd5\ft\xa2v\x9d\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\r\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa3', 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0xa3}, 0x2e8)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0xc080aebe, &(0x7f0000000080))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, r2, 0x0, 0x11, &(0x7f0000000000)='cgroupnodev.em1]\x00', 0xffffffffffffffff}, 0x30)
setpriority(0x3, r4, 0x8)

16:43:34 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={<r1=>0x0})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x505000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={r1, 0x80000, r2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x800, 0x0)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x2}}, 0x10)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)

16:43:34 executing program 1:
mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xfffffc, 0x10031, 0xffffffffffffffff, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000580), &(0x7f00000005c0)=""/214, 0xd6, &(0x7f0000000780)={&(0x7f00000006c0)={'sha512-avx2\x00'}, &(0x7f0000000700)})
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2313b473, 0x101000)

16:43:34 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:34 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7bcb, 0x745280)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x312, {{0xa, 0x4e22, 0x697, @mcast2, 0x1}}}, 0x88)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffff94)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x4, 0x800, 0x78, 0x6})
socket$inet_icmp_raw(0x2, 0x3, 0x1)

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:35 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7bcb, 0x745280)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x312, {{0xa, 0x4e22, 0x697, @mcast2, 0x1}}}, 0x88)
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffff94)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x4, 0x800, 0x78, 0x6})
socket$inet_icmp_raw(0x2, 0x3, 0x1)

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:35 executing program 1:
r0 = socket(0x10, 0x807, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1b}, {&(0x7f0000000e80)=""/30, 0x214}], 0x1000000000000239, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400})
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

16:43:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x6, [0xc0000101], [0xc1]})
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0x2})

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f0000000040)=""/151)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2000400000000e)
ioctl$TCFLSH(r0, 0x540b, 0x1)

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:35 executing program 1:
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x2, @local, 0x4}}, [0x1, 0x7, 0x5, 0x10000, 0x1, 0x7, 0x4b6, 0x7fff, 0x2, 0x3975, 0x5, 0x7, 0x7ff, 0x100, 0x3]}, &(0x7f00000000c0)=0x100)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x3}, 0x8)
read(r0, &(0x7f00000002c0)=""/136, 0x88)
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9, 0x0, 0x41e6f28d}, 0x0)

16:43:35 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={<r1=>0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x100000000, 0x1f, 0x5, 0x2, 0xfffffffffffffffc, 0x4d, 0x80000000, 0x7fffffff, 0x9, 0x75b8, 0x2a21, 0x1, 0x5, 0x20, 0x11c]}, &(0x7f0000000140)=0x100)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x2}, &(0x7f00000001c0)=0x8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x80000000, 0x80000)
r3 = getpgid(0x0)
sched_getaffinity(r3, 0x8, &(0x7f0000000240))
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000280)={0x2, 0x0, 0x5, 0x0, 0x20, 0x7b})
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000300)={0x990000, 0x7fffffff, 0x7, [], &(0x7f00000002c0)={0x9a0911, 0x10000, [], @ptr}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8)
setuid(r4)
sendmsg$netlink(r0, &(0x7f0000000d00)={&(0x7f0000000480)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f00000004c0)={0x2e0, 0x2d, 0x1, 0x70bd2a, 0x25dfdbff, "", [@nested={0x2d0, 0x7e, [@typed={0xc, 0x30, @u64=0x9}, @typed={0x8, 0x8a, @u32}, @generic="ba6b721e3b0ec37aabb6871bdb0a1ab1a01b6da6b48815f88ad585bdd916557efb9da0984fc9f1dcc4da88599c3cdd633cd206254a063f193aa467bea72358979df313a3e6b54173e7661fc553fe74af295efcb24f74abf92dc7ff4e9f819aca7d250e1b5703785e1824692427c82f0145ac5a986007c496dd1a671ded4124d8866e8d6fe3737e08b9a1a647ad5e08b0c29a18c35150acba461c3b5079e72d65d9681eec8109078295c87aac388c6fcbe4141555ae41ec6f9339f2f68b1231b40a2a9c38286cbd2e33531381f7312ec93f6736d3489b2b3d21b0155dbb3bfb6497e81722fd7b045c017825b528eea6", @typed={0x8, 0x43, @pid=r3}, @generic="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", @typed={0x8, 0x11, @uid=r4}, @generic="c9f079edf5d5a43508d56a31bc60b59c12b589a0c574dcbf222995a5e2d5e0df600ef4ee2aaea8341ee02edb234216a9d7ef4f02c874b24d287443c9e2ecd6a0581a0ba7daafdae7b9203a59b49f5509f34b79d79c3ea93fe6f191103ebb67c23b0fcd7670da2d2734e7e8d57b987334cf44250cc35ab54fd32ec42816501ebcbcfd83c388ecd66eb4bded0cde38197d713283eb4e1501f48f7598654ee82b8eaef9aa83576aa205a158e048d1008fb8b51ea84b1da92bf99dfd7d758b1730"]}]}, 0x2e0}, {&(0x7f00000007c0)={0x54, 0x34, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="13a5fcbff57f530c5fc8523fd6fbcea6e57072b397f9243b8240f09d35a50017ff82e01b30b1607e67860e93daaec9f38cb1156292d3695ce8eb28ed8e7fdc", @typed={0x4, 0x72}]}, 0x54}, {&(0x7f0000000840)={0xf8, 0x22, 0x100, 0x70bd25, 0x25dfdbfb, "", [@generic="9f8aa67d033f148228ec4a825157ce9e46210b4dbc87905af1575f9dc84ad10b6cf2fb585d8fa6f8519379d3a41244da987a299160cb520a3ed3af86ab19e6e80e936599945994de195b84e5e435e3be6ef870f9832992b3d113513cff83d949b25e831fee7eb5fb9b8613b468b9f9626688d3373d2a923a1090b87f366c7791b6e5975b67b2b0bee7c56b3635b06b20a417a69e61bc25968881449d7ee8eb4a7c8193724a6947089c083385604d3fddbd3f77cf95fd6c8b230d386f0d75a0d141da6cfb24b927e9dbf8a04a5626c3f9c1288129572210b4c111f0e18ce75099ba15c23379bd"]}, 0xf8}, {&(0x7f0000000940)={0x380, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xb4, 0xa, [@generic="1a8b14abce8e9949706e7d2c0958cd225357bb888afefbbe1d03452855cece1681c65df0b3e14cd25c66527dd0a6f9c898b3d2ed671caf230181afce1a7ff121d8fbeee3c9d5e534bdb39f006e8df3433e061e8e975dc4016445fd012ef27a52372e909418041920be2fbcf525d5c9ad479c518f74fad9bda27b63375594c5e08cadfb948ee2d4a25359eb7638abbe331ff322bd4958bd9417d0e5a874ac8a76d312174e3932a80f426cf4ec9e723f"]}, @generic="419611de4df82ded3e498a344f07d56c8bea2be971c4816efd0997daf9a8037f6209f6cc2019f5e78eea11504f1639d1ecacf2a891b25a728c62221b9a2cc19b9c1ffdd572f2e1b6f16bad833f5c59618e0940b3de832e026356f0b28b3b1099f39aba6268481363fb2e416ceaa08baf40a7b1788d7a9a97efa211b66de7f654055051d1b39148a58d6a697659fefe2fb9b7f1790529cbe03ec616fc5508a60049d582537c6337fdc822295ad8769495d4bcd4b96911bdecd557f38651181b81ff9c000a00727e4ed5b446b84f9c5159e02b28ef246b1d6ecd6e752944", @typed={0x8, 0x37, @pid=r3}, @generic="e12c41c9b6184163987987fdc77557ec600198b6c7fec021f0882485f4758ed7a4fc9ab18436577f79591becce3d41e41ca01180cd2b341fbbf15d452fddb3ea82ae0d73bf7bb20d25739294ec9522bc3629733c04fcc4b995ff2a4f208d0fdb7add3d4d4188df237d8fbabcae6acf015f4a1b20daa7e72a4c31e952d591365ced5be2e392a03574aff0535ccc2d7200d962c63bc0f458bc4b48bf24fc244eff9bec48e4c29d42df5d12cbab7f0ac780cf61cfa7f08d9ff0d421a1ac7094baab18641c9decd1b429d27af67c2cce501d5fbad0778614", @generic="25c19cd3de7971b27d4ddc5cd8d1cba65b4080e84f24474848d81326eccd3ce8ed674a1c477b895cb98856", @generic="ad5b5882d76daa36e36e3ff0432dfb1542928bf4d934f506eb04651ab874f7bbb547c651d2cd90c71d4c9ed65753ff998ed50e1efb797b38d672ff75b3d32617aa5767b0906522007134db6ba28b8f605a81d1fe0867ffac71f669d1837e70f1b058083e3824fecea5ec582a357a2fc628adb1dec2921bf5b92d48bcdfa149a4f1c2262b915555f44052ba7cfcd97a2e2085003f6a969d1a1ff282f378963381badf66e3ebe598c16efd715e3bc5798fae8de1512705e198d1c1834052d6f3f0f6e086acddbc098754667acc64b050cce36b3e659708"]}, 0x380}], 0x4, 0x0, 0x0, 0x4000080}, 0x40)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000d40)=0x2)
mkdirat(r0, &(0x7f0000000d80)='./file0\x00', 0x102)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000dc0)={'security\x00', 0x50, "0cb035eb8e03eaf8d6b630f96c037ff3b827a8010019d16d3518dc0cf5b6f5a2eb0f658c37c3cc70fcff16ee242670f2453bc34175c1cd0703fe526b871f0f1c789547e3e98013e139eb9655a8b9f9e1"}, &(0x7f0000000e40)=0x74)
r5 = msgget$private(0x0, 0x0)
msgrcv(r5, &(0x7f0000000e80)={0x0, ""/31}, 0x27, 0x2, 0x3000)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000ec0)=0x5, 0x4)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000f00)=""/104)
capget(&(0x7f0000000f80)={0x399f1736, r3}, &(0x7f0000000fc0)={0x3a06, 0x100000000, 0x9, 0x100000000, 0x3, 0x60a})
vmsplice(r2, &(0x7f0000001200)=[{&(0x7f0000001000)="826ff36674b0495d5f04e6c47cd4bf9b31c57adde85a9513083f6adb4feee50590cde12780b60b68f37c67e1c34e00c935484698d83e08683e8f7ef7ffb5f491b203abc9a9b4284d21bc432cbd73cd335dc7bd20dfae889f2e16032dfc93f7b4afeb6e27a82038ecc165098e73cc3d80fe3d496eb83b1d4eea2e43feb5f56b496fb302a86bd500eb4d04bf2e6f39bcc304ffdf9d67208eb9d11dd1108584c8e204bb84aaef738c4794903ef4d9a88b4f5bc274d0221178de5daf055f834ea0c4172838aa7211d0f29cb02280c0c794b0d17d707b74515903b9", 0xd9}, {&(0x7f0000001100)="09259121fd2bac2950bb1aea3d68660b441ef841da0248996093766f39d08acd49be1b092f1b878e1140d8bb46649eb0e063535b2fd76334b92e2d4537d933064a7c132932cedf99d06b4e0eaa3bc025bab6d2d1ea298f5024f115472e6c0b156ea59f28ce16e117595c7e5a3e328074d78662d14ebc8a002f23818dfe71882697fbd8643b3ad6b5f0b7f6d3b14c1baa54dd269f47d7d038ea2c511711c3cb44c390817cff164625a779891f2df159d7519a37da3a8c4452b51c0bec7a50efb804256ab52f077fd2558fc890b9eaee3e469e61d4d8bab02695fed8197e575daef1d9be797382", 0xe6}], 0x2, 0x4)
gettid()
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x81)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001240)={0xf, @output={0x1000, 0x1, {0x7, 0x81}, 0x401, 0x3ff}})
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001340), 0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001380)={r1, 0x0, 0x3f, 0x6c, 0x8, 0xffff}, &(0x7f00000013c0)=0x14)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001440)={0x4, &(0x7f0000001400)=[{}, {}, {}, {}]})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001480)="e4404222ffb07881e092e43605fb5697092ab517be1085cbff131c276b9939e3b76d29ff50eff694449378a58f93c359b7c446af1f63afe2c8aface8588c452ceadee555ed07dd6a2da8bd7dac2bd258c77dec285e80de2ef7a7bd18ead13d", 0x5f)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001500)={0x0, {0x3, 0xffffffff, 0x8000, 0x9}})
r6 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, r6)

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:36 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  226.115768] IPVS: ftp: loaded support on port[0] = 21
16:43:36 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0xfff, 0x6, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x10, 0x7, 0x5, 0x8, 0x2, 0x80, 0x1f, 0x5, 0x7, 0x0, 0x8, 0x720, 0x7, 0x8, 0x2, 0x6, 0x401, 0x2, 0x9, 0x4, 0x3d, 0x6f, 0x7, 0x2, 0x101, 0x100000001, 0xfffffffffffffffc, 0x7aa67f34, 0x7, 0xdac, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x3, 0xfff, 0x4, 0x8, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  226.236124] chnl_net:caif_netlink_parms(): no params data found
[  226.345470] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.352012] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.359915] device bridge_slave_0 entered promiscuous mode
[  226.379410] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.386029] bridge0: port 2(bridge_slave_1) entered disabled state
16:43:36 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  226.394069] device bridge_slave_1 entered promiscuous mode
[  226.421954] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  226.432612] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  226.469404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  226.477701] team0: Port device team_slave_0 added
[  226.493460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  226.501770] team0: Port device team_slave_1 added
[  226.520168] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  226.538549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
16:43:36 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2000, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))

16:43:36 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  226.645413] device hsr_slave_0 entered promiscuous mode
[  226.682519] device hsr_slave_1 entered promiscuous mode
[  226.723470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  226.730810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
16:43:36 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2000, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))

[  226.785433] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.791968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.798952] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.805515] bridge0: port 1(bridge_slave_0) entered forwarding state
16:43:37 executing program 0:
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/5)

16:43:37 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x7fff, 0x3, 0xfffffffffffff800, 0x5, 0x8, 0x0, 0x1, 0xff, 0x80000001, 0x9a7, 0x4, 0x80})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @mss={0x2, 0x4}, @sack_perm, @window={0x3, 0x2, 0x4}, @mss={0x2, 0x3}], 0x6)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sched_setaffinity(0x0, 0x6, &(0x7f00000002c0)=0x40000000000009)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
process_vm_readv(r2, &(0x7f0000000640)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x354, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0)
tkill(r2, 0x1000000000014)
r3 = syz_open_pts(0xffffffffffffffff, 0x40000)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x7cf1aa36)

[  226.957042] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  226.963714] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.996489] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  227.018642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.033751] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.050387] bridge0: port 2(bridge_slave_1) entered disabled state
16:43:37 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400)
bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4)
fsetxattr(r1, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8000a0}}], 0x10)
close(r3)
prctl$PR_CAPBSET_DROP(0x18, 0x20)
close(r1)

[  227.070552] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  227.094381] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  227.100513] 8021q: adding VLAN 0 to HW filter on device team0
[  227.144889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.153105] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.159567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.220131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.228434] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.234972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.244101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.252751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.260899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.275545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  227.285235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.296576] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  227.302763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.324185] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  227.350183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.356915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.364718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.372791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
16:43:38 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x5, 0x5, 0x5, 0x8}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x2c)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0xc0200, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x1})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f00000000c0)}, 0xfffffffffffffde4)

16:43:38 executing program 0:
r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:38 executing program 1:
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffffb2)
lsetxattr$security_smack_entry(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0)
chmod(&(0x7f0000000100)='./file1\x00', 0x0)
mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x50)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

16:43:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x1, 0x4, 0x5, {r1, r2+30000000}, 0xfffffffffffffffc, 0x74f})
openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x802, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)=0xfffffffffffffefc)

16:43:38 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:38 executing program 1:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x335)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
fadvise64(r0, 0x3, 0x0, 0x2000000000000007)
sendto$packet(r1, &(0x7f0000000180)="b4e7044df10aec94c260822c3719f4639f7413a17b4a0474cb6c63b6844940e881dbe4f97460dceee88e95293336b51ae8bdbb22e8d1f329b06fc7ce2d05ae97d36db8bbca3167d07e0c6099baf9f7373cdcfb613b19b52235f7f49eb8062ea4ea4d13ae9d78ba632f76656425c70b34c7f5101c6fac7270d813d2e42023b1bdd7098487b6a7996265af8a828ba44694cc0cf1b2af97a30cec65c4ef8cb626f25f3173cff88506ca228b449bc7e6035571d3", 0xb2, 0x40000, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f00000016c0)='\xb5t_\a\x92\x8e/\x00\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@dev, @remote}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x2000005)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3e)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000240))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x351)

16:43:38 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2000020000, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = geteuid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="661b00", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',allow_other,allow_other,default_permissions,allow_other,default_permissions,blksize=0x0000000000000800,max_read=0x0000000000000081,uid>', @ANYRESDEC=r4, @ANYBLOB=',fsuuid=\x00g\x003ww7g-1075-bw2w-d7\x00\x00-?caed8vf,fsuuid=;51c0a4f-fc;a-4?\bs-f070-\x00\x000fe7ub,\x00'])
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @sdr})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100002c0}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0xb00, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x81)
setns(r1, 0x40000000)

16:43:38 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3d, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@add_del={0x2, 0x0})
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2000, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000))

[  228.912942] print_req_error: I/O error, dev loop0, sector 0
[  228.918812] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  228.926798] print_req_error: I/O error, dev loop0, sector 8
[  228.932621] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  228.940350] print_req_error: I/O error, dev loop0, sector 16
[  228.946273] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  228.954073] print_req_error: I/O error, dev loop0, sector 24
[  228.959918] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  228.967705] print_req_error: I/O error, dev loop0, sector 32
[  228.974299] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  228.982096] print_req_error: I/O error, dev loop0, sector 40
[  228.987941] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  228.995753] print_req_error: I/O error, dev loop0, sector 48
[  229.001596] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  229.009397] print_req_error: I/O error, dev loop0, sector 56
[  229.015282] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  229.023600] print_req_error: I/O error, dev loop0, sector 64
[  229.029443] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  229.037243] print_req_error: I/O error, dev loop0, sector 72
[  229.043148] Buffer I/O error on dev loop0, logical block 9, lost async page write
16:43:39 executing program 2:
ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000140))
mount(&(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000880)='cgroup\x00', 0x0, &(0x7f0000000040)='cpuset\x00\x94\xbf\x7f\x03\x18\x1f[\xe6uk\xb6\xf8\xf4\"\xb4F\x10\x1a>PS\x7f\xed\xf9\xdc;`\xf0\x02\x8aI=6Kf\x92')
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000c80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000cc0)=0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000d00)={<r1=>0x0, 0x8, 0x78, 0x2163}, &(0x7f0000000d40)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000d80)={r1, 0x87, "565f65c21a2fbc0ce82347430baafd4d27946477cc9a20bc37c74110be394b3c96bce8a6cc1f8fb549d114465ff2dead07260e0f5390162d4a7448d0e4e3866400ad4a948fca12a5b1873b1f65bcb8bd2133945a6776959adce0d721eff63b91ba908b0ee14abe76d478e3cf84dfe349429599890226ba04295e02e758c78b86aa02c2196a5bbc"}, &(0x7f0000000e40)=0x8f)
r2 = open(&(0x7f00000008c0)='./file0\x00', 0x400, 0x0)
ioperm(0xfe, 0x9, 0x2)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000900)={'filter\x00'}, &(0x7f0000000980)=0x78)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00', &(0x7f0000000840)='filter\x00', 0x7, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x19f}], 0x1, &(0x7f0000002900)}, 0x0)
mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="15991ea85129485666bf10218af804f8a2cd0d6066d3f949f3624bd3ee3bad769b163a111c723d424f578e2d8bc11b22ff9594b52bd36cc5361224"], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000280), 0xffffff76, 0x20000004, &(0x7f0000000080), 0x1c)
ppoll(&(0x7f0000000040)=[{r4}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8)
r6 = getpgrp(0xffffffffffffffff)
setpgid(r6, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000e80)="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", 0x48a}], 0x1, &(0x7f0000000a00)}, 0x4000000000)
mount(&(0x7f00000001c0)=@sg0='/dev/sg0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480))

16:43:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:39 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xe607000000000000}, 0xc, &(0x7f0000029000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x1f8}}, 0x0)

16:43:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:39 executing program 1:
setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='keyring\x00', 0x8, 0x2)
r0 = socket(0x1e, 0x2, 0x0)
fcntl$notify(r0, 0x402, 0x2)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
recvfrom$inet(r0, &(0x7f0000000100)=""/67, 0x43, 0x2000, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000200))

16:43:39 executing program 2:
unshare(0x400)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = socket$inet6(0xa, 0xb, 0xc417)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1, 0x0, @ipv4}, 0x1c)

16:43:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:39 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffbc, 0x4)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2000000})

16:43:39 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x80042, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000004c0)={0x1}, 0x1)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x10000, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x30400001}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r3, 0x2a, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51b5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x124}}, 0x40000)
r4 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x240)
ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f00000001c0)={0x75, ""/117})
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, &(0x7f0000001200)=""/150})
r5 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x4000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r6=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r6}}, 0xc)

16:43:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:39 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
r2 = dup2(r1, r1)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={<r3=>0x0, 0x87, "ed6ece4ad1c262d1a0ce64c32b984183962050c2574ce4fdad5081e0e675ba06989658bcaba4ee561183e5d4c15de1ff4a17653cf9f7b43a71ad17e003176d917dc3c8ef4cc2d66e08ebda6bdb0ed91eaee07f2d4c4579b26c33b9df77de9e176d6050079affb550d99c7140619d606c4c198a9d8af86e52f2e84ede68f9f8f4f05388e8ad36d6"}, &(0x7f0000000000)=0x8f)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)={r3, 0x5, 0x5}, 0x8)

16:43:40 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:40 executing program 0:
syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/5)

16:43:40 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0)

16:43:40 executing program 0 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:40 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x600, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[0x80000000, 0x5, 0x800, 0x10001]})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {0x6}]}, 0x10)

[  230.425800] FAULT_INJECTION: forcing a failure.
[  230.425800] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  230.437852] CPU: 1 PID: 10154 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1
[  230.445084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  230.454484] Call Trace:
[  230.457141]  dump_stack+0x173/0x1d0
[  230.460829]  should_fail+0xa19/0xb20
[  230.464614]  __alloc_pages_nodemask+0x7b0/0x5f20
[  230.469439]  ? __kernel_text_address+0x250/0x350
[  230.474271]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  230.479775]  ? __save_stack_trace+0x99e/0xb90
[  230.484335]  ? alloc_pages_vma+0x108/0x1970
[  230.488718]  alloc_pages_vma+0x164b/0x1970
[  230.493021]  do_huge_pmd_wp_page+0x3489/0x55a0
[  230.497702]  handle_mm_fault+0x32b0/0x9ef0
[  230.502014]  __do_page_fault+0xf26/0x1a60
[  230.506226]  do_page_fault+0xe9/0x5c0
[  230.510070]  ? kmsan_unpoison_pt_regs+0x13/0x20
[  230.514785]  ? page_fault+0x2b/0x50
[  230.518460]  page_fault+0x3d/0x50
[  230.521971] RIP: 0010:__put_user_4+0x1c/0x30
[  230.526426] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48
[  230.545383] RSP: 0018:ffff88802619fab8 EFLAGS: 00010293
[  230.550775] RAX: 0000000000000001 RBX: 00007fffffffeffd RCX: 0000000020000240
[  230.558072] RDX: ffff88802770fb20 RSI: 0000160000000000 RDI: ccccccccccccd000
[  230.565363] RBP: ffff88802619fb58 R08: ffffffff8bf40ea8 R09: 0000000000000000
[  230.572652] R10: 0000000000000000 R11: ffffffff882d49d0 R12: 0000000000000001
[  230.579953] R13: ffff888038164588 R14: 0000000000000001 R15: 0000000000000001
[  230.587262]  ? snd_pcm_notify+0x7d0/0x7d0
[  230.591442]  ? snd_pcm_control_ioctl+0x6f1/0xd30
[  230.596230]  ? snd_pcm_notify+0x7d0/0x7d0
[  230.600398]  snd_ctl_ioctl+0x24c1/0x32f0
[  230.604508]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  230.609896]  ? fsnotify+0x2092/0x20a0
[  230.613738]  ? __msan_poison_alloca+0x1f0/0x2a0
[  230.618426]  ? do_vfs_ioctl+0x187/0x2bf0
[  230.622511]  ? snd_ctl_poll+0x2b0/0x2b0
[  230.626510]  do_vfs_ioctl+0xebd/0x2bf0
[  230.630429]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  230.635827]  ? security_file_ioctl+0x92/0x200
[  230.640348]  __se_sys_ioctl+0x1da/0x270
[  230.644348]  __x64_sys_ioctl+0x4a/0x70
[  230.648254]  do_syscall_64+0xbc/0xf0
[  230.652013]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  230.657218] RIP: 0033:0x457ec9
[  230.660510] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  230.679435] RSP: 002b:00007fa4fbd0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.687175] RAX: ffffffffffffffda RBX: 00007fa4fbd0ec90 RCX: 0000000000457ec9
[  230.694462] RDX: 0000000020000240 RSI: 0000000080045530 RDI: 0000000000000003
[  230.701754] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  230.709040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa4fbd0f6d4
[  230.716323] R13: 00000000004ca218 R14: 00000000004d3960 R15: 0000000000000004
16:43:40 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="0002020100000000ff010000000000000000000000000011ba8b7068e6f1e2657dac4a5a97e6145a275cc71cb947904a3c7fedff51ebcd8f43d03e7f44bd11736c7eea1958a294f66c2eee1e1e873078a214bf3379ffd86f19bae553181a650b82447500ea2f99adea71b7f7c22ae540a72115e64e47a09955678b00040000dbea1da906f440b295ce155de5b300000000000000000000f4d84957aaef669dc541aeb4ca2135eff70c2fabca0298a089ad62e5a54465c8fed45f1303e0b3be2e3b3cadf56999117a84ccfa"], 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@routing, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
fcntl$addseals(r0, 0x409, 0x6)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x400000)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x1ff, r3})

16:43:40 executing program 0 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:40 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/174, &(0x7f0000000100)=0xae)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x18}, 0x2, 0x3, 0x2, 0x0, 0x0, 0x3}, &(0x7f0000000180)=0x20)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000001c0)={{0x3, 0x0, 0x6, 0x1, 0x9ddf}, 0x2, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x0, 0x8, 0xa10})
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000002c0))
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="ea386dbafc82b28765a70785d676a5fc", 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x1, 0x0)
write$apparmor_current(r0, &(0x7f00000003c0)=@hat={'permhat ', 0x4, 0x5e, ['id1\x00', '*,[\xcfppp1md5sum\x00', 'timer0\x00', '\x00', 'id1\x00', '*lo*\x00']}, 0x3f)
ioctl$KDDELIO(r1, 0x4b35, 0x99)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4)
preadv(r1, &(0x7f0000000480), 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nullb0\x00', 0x480800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x442, 0x0)
ioctl$KDDELIO(r0, 0x4b35, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={&(0x7f0000000540)=[0xfffffffffffffeff, 0x6, 0x0], 0x3, 0xfff, 0x3ff, 0x1000, 0xfff, 0x3, {0xffff, 0x4, 0xb6, 0xe62, 0x2, 0x5, 0x4f, 0xfffffffffffff847, 0x1ff, 0x9, 0xff, 0x7fff, 0x7, 0x2, "c7aa05262b7a162c5c04f401165ec23482df90224be5fe6754e8cd79bdead68f"}})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x308, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcad0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x48}}, 0x40)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000780))
sendto$unix(r2, &(0x7f00000007c0)="be2d8ccdd5bbf24a0817a76867d5829393a8291b3bef2fd34ac2120056ea50b17f4dc5efa35e6ed8574110fa566bdf05d2a87aeb9ead3c2ce35d41b852aee276bdf4ee54b883ba1dfd4ade1e43f2e1438e34ff2460a623054a018c97a5d05b11dc76d7d72584de1c6587f39ee981fea0bf3cda5cfee9dc22eda559cbb42a119d221eb82d19f336ed307d61eb2450b7b12c0154c6f5d334ae97fd274df8f815cba31909e810a79530d5e834cfe54bce8be1ed1b0ee18a586ba9964855666f9797c322266a762f3bf020d49d", 0xcb, 0x40, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000940))
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000980)=""/11)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x9200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x9c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000)
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000b40)={0x5, 0x7, 0x7fff, 0x5, 0xf06})
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000b80)={0x7, 0x10000, 0x253e, 0x6, 0xfffffffffffffffc})
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000bc0)={{0xb94e, 0x8, 0x4, 0x9, 0x6, 0x101}, 0x800, 0x6, 0x5})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000c00)=r0, 0x4)
ioctl$KDSETLED(r1, 0x4b32, 0x20)
getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)

[  230.974604] FAULT_INJECTION: forcing a failure.
[  230.974604] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  230.986482] CPU: 0 PID: 10166 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1
[  230.993702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  231.003419] Call Trace:
[  231.006031]  dump_stack+0x173/0x1d0
[  231.009678]  ? update_stack_state+0xa0e/0xb40
[  231.014217]  should_fail+0xa19/0xb20
[  231.018036]  __alloc_pages_nodemask+0x7b0/0x5f20
[  231.023059]  ? __inc_numa_state+0x7a/0x1b0
[  231.027302]  ? zone_statistics+0x1c9/0x230
[  231.031540]  ? __msan_get_context_state+0x9/0x20
[  231.036294]  ? rmqueue+0x11ef/0x1240
[  231.040190]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  231.045581]  kmsan_internal_alloc_meta_for_pages+0x80/0x580
[  231.051296]  kmsan_alloc_page+0x7e/0x100
[  231.055361]  __alloc_pages_nodemask+0x1587/0x5f20
[  231.060221]  ? __kernel_text_address+0x250/0x350
[  231.064989]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  231.070437]  ? __save_stack_trace+0x99e/0xb90
[  231.074959]  ? alloc_pages_vma+0x108/0x1970
[  231.079285]  alloc_pages_vma+0x164b/0x1970
[  231.083535]  do_huge_pmd_wp_page+0x3489/0x55a0
[  231.088145]  handle_mm_fault+0x32b0/0x9ef0
[  231.092413]  __do_page_fault+0xf26/0x1a60
[  231.096579]  do_page_fault+0xe9/0x5c0
[  231.100382]  ? kmsan_unpoison_pt_regs+0x13/0x20
[  231.105048]  ? page_fault+0x2b/0x50
[  231.108676]  page_fault+0x3d/0x50
[  231.112146] RIP: 0010:__put_user_4+0x1c/0x30
[  231.116556] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48
[  231.135458] RSP: 0018:ffff8880215bfab8 EFLAGS: 00010293
[  231.140856] RAX: 0000000000000001 RBX: 00007fffffffeffd RCX: 0000000020000240
[  231.148122] RDX: ffff8880215dfb20 RSI: 0000160000000000 RDI: ccccccccccccd000
[  231.155390] RBP: ffff8880215bfb58 R08: ffffffff8bf40ea8 R09: 0000000000000000
[  231.162659] R10: 0000000000000000 R11: ffffffff882d49d0 R12: 0000000000000001
[  231.169936] R13: ffff88803805c588 R14: 0000000000000001 R15: 0000000000000001
[  231.177217]  ? snd_pcm_notify+0x7d0/0x7d0
[  231.181374]  ? snd_pcm_control_ioctl+0x6f1/0xd30
[  231.186137]  ? snd_pcm_notify+0x7d0/0x7d0
[  231.190285]  snd_ctl_ioctl+0x24c1/0x32f0
[  231.194365]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  231.199739]  ? fsnotify+0x2092/0x20a0
[  231.203542]  ? __msan_poison_alloca+0x1f0/0x2a0
[  231.208211]  ? do_vfs_ioctl+0x187/0x2bf0
[  231.212271]  ? snd_ctl_poll+0x2b0/0x2b0
[  231.216241]  do_vfs_ioctl+0xebd/0x2bf0
[  231.220135]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  231.225506]  ? security_file_ioctl+0x92/0x200
[  231.230008]  __se_sys_ioctl+0x1da/0x270
[  231.233992]  __x64_sys_ioctl+0x4a/0x70
[  231.237881]  do_syscall_64+0xbc/0xf0
[  231.241600]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  231.246789] RIP: 0033:0x457ec9
[  231.249985] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
16:43:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x105402, 0x0)
dup2(r2, r0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x200, 0xf, 0x4, 0x40000000, {0x77359400}, {0x0, 0x0, 0x2, 0xffffffffffff7fff, 0x3ea, 0xd93, "56abc624"}, 0x9, 0x5, @fd, 0x4})

[  231.268886] RSP: 002b:00007fa4fbd0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.276591] RAX: ffffffffffffffda RBX: 00007fa4fbd0ec90 RCX: 0000000000457ec9
[  231.283867] RDX: 0000000020000240 RSI: 0000000080045530 RDI: 0000000000000003
[  231.291133] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  231.298398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa4fbd0f6d4
[  231.305662] R13: 00000000004ca218 R14: 00000000004d3960 R15: 0000000000000004
16:43:41 executing program 1:
syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x2, 0x4000})

16:43:41 executing program 0 (fault-call:2 fault-nth:2):
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  231.694080] IPVS: ftp: loaded support on port[0] = 21
[  231.822076] chnl_net:caif_netlink_parms(): no params data found
[  231.877868] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.884447] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.892391] device bridge_slave_0 entered promiscuous mode
[  231.900943] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.907538] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.915606] device bridge_slave_1 entered promiscuous mode
[  231.959240] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  231.970187] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  231.997625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  232.005959] team0: Port device team_slave_0 added
[  232.013067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  232.021298] team0: Port device team_slave_1 added
[  232.027600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  232.035836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  232.215739] device hsr_slave_0 entered promiscuous mode
[  232.262330] device hsr_slave_1 entered promiscuous mode
[  232.304244] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  232.311773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  232.339405] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.345958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.353011] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.359486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.439000] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  232.445249] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.458402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  232.471466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.482745] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.490632] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.507394] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  232.523834] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  232.529948] 8021q: adding VLAN 0 to HW filter on device team0
[  232.545851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.553951] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.560400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.605821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.614313] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.620793] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.629908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  232.638922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  232.647462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  232.665541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.676750] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  232.683259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  232.703404] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  232.714578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  232.722487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  232.737125] 8021q: adding VLAN 0 to HW filter on device batadv0
16:43:42 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}, 0x15, 0x3, 0x4}], 0xfffffed5)

16:43:42 executing program 1:
syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x2, 0x4000})

16:43:42 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x109, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000801)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000600)={0x8ab, 0x5, 0x4, 0x1})
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
sendmsg$xdp(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x1, r3, 0x2a}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="81c9b40db4ad0b204a13060bd463f63dca6c09f3f6444b8a6e93a86bfa514ea394b897fee4398e7b247ba91bb2b9e00b6b6bb3d513de110841ef236b738d054fd1968656222ae69ec9d3f5c07d149dc66bc615c02b9387468f1372fe84716793a0bb0bd894e380ea6618d02f32d811a46f89cc9bee247d6948eec7e44b1260112537a6", 0x83}, {&(0x7f0000000280)="82f46aa9da952697e5fb659818e410308a223c58613da2a8bc21ab547d9323e4a88bf2f3d22119f97f98dc76f03b204ff57fecba019d5276f32d8bbb6f77268d449ff3ff9ac9c339bcd1d9cbc3f6b67bbf707e72dc98edecf5ecd78e431a9669e72dbd461d933dc7b77f267f29cdbdf71d27f2b33859aa700114447dcdd264f943fb928b0bc68cf339ffb812b630c34b2cd3a3312a141c92a4d365d8c20836fd8fea743d25abca032c7c66ca9b48547d05fff5c8c4f898", 0xb7}, {&(0x7f0000000340)="0ed14baf741ee01c46667b5e39f2f190f5f9d2cb498cca4c573dce0ff793bf25c54fa7694ef6c424c886aba792f123934d7bb74772f980b38b06fef99ba0cf1946a850ec87e2ec18f339e3459a0426013d3c287d6564760cdba1aa96294caaaa506732c2d86623a2615bcfd85a256e6ce02a7fe8eaee90971ef9d4355371abf6a26003e8cbfd73db4b7b119d55d204ad08231219af6b465427fd784f82dfe868e23753edd33c8f3620a854a04df466", 0xaf}], 0x3, 0x0, 0x0, 0x8804}, 0x4000000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=<r4=>0x0, @ANYBLOB="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"], &(0x7f0000000440)=0x12)
ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={r4, 0xff, 0x4, 0x4, 0x6}, 0x14)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xdc7)
getdents64(r1, &(0x7f0000000640)=""/77, 0x4d)

16:43:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008910, &(0x7f0000000080)="0adc1f023c123f3188a070")
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0xe866, 0x0)
r2 = getpgid(0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xa1, 0x40)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="34000000faa3b5084d4e6aedbca4941c8ace0d545fb0b4e60fbd2ca4139023c21039ebd21d698e55c4a5cab6d495c641a2ee1ce33ac1cf3b8c8909c1979afe29df325897bba628d93f2f56391b072b4a29827392a7f5ffbb14039c2906914555942965bea68e9c9f0876f7e2300932365f460f5f2e476af1204aebadebe17a644f0342357b3587fb5d7488b7dfd1bef6832cbb2bfb41cbbb4c7a9d0c5309482127122b09828ed44482", @ANYRES16=r4, @ANYBLOB="140025bd7000fcdbdf25010000000000000001410000001800170000000e0000ffff7564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000400)={&(0x7f0000000340)="fb0f2939493bfb4b45612c563dcbf0d55580aa5024e6a4db8faea1dcf1ce56daea13bd92babb13571d1d8f840e88b642d78649a95d2aecadf1a248a132665761d400f3b4f8f7fe4df9be266e2f642c2fc0ecc0feb9b41c6b0a9bda66bbc41241a339a289bf2c06aba916d3f9e77557988bfac3770cba31fc2983223868b450325296309ed241cdbea7680d819dde512bc52fdaacc235da9e0a0cb14458618a8e1e8c2df03a4587c422c17e3373", 0xad})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x101100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000440)={{0x2, 0x3f}, 'port1\x00', 0xa0, 0x180841, 0x4, 0x7, 0xf7, 0x3ff, 0x9, 0x0, 0x4, 0x9})
ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000002c0)={0x0, 0x3, 0x2a2, [], &(0x7f0000000280)=0xbd})
ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000140))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={<r6=>0x0, r5, 0x0, 0x8, &(0x7f0000000100)='keyring\x00'}, 0x30)
wait4(r6, &(0x7f0000000240), 0x4, &(0x7f0000000640))
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4)
clone(0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$getflags(r5, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0xc0045520, &(0x7f0000000000))

16:43:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}})
ioctl$VIDIOC_STREAMON(r0, 0x40045613, &(0x7f0000000000)=0x1)
munmap(&(0x7f0000e00000/0x200000)=nil, 0x200000)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x101, 0x400000)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10)

16:43:43 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:43 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x181000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000001440))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2})
write$P9_RATTACH(r2, 0x0, 0x0)

16:43:43 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x840, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r1, 0x20000000008912, &(0x7f0000000b80)="0a5c2d0240316285717070")
r2 = socket$inet(0x2, 0x8008000000003, 0x1)
modify_ldt$write(0x1, &(0x7f0000000000)={0xffffffffffffff05}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffeb, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)

16:43:43 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='\xd6o\xad\xdc\xf2/sys\x16k\x1dK\x82\xd5\xcc\xf0\x97\x98\xed\xfa\xbe<\xc3\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00', 0x2, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x1}}, 0x10)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:43:43 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4000002, 0xfffffffffffffffe)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x752c, 0x7fffffff}, {0x7fff, 0x2}, {0x100}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x3}]})
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x0)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x81, 0x110100)

16:43:43 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="6f326114abc3bc112d6ba4bb96b7d04bda1a90a9c435df1b9f5cb23effde578b417dc62c0b1291c3ec415e2a1778e1edbb9bccc2c5ac59d6cd83292d866b09c558d17e2152bb96cbbc1a02e7b0982bd7a7861ad2933c77eb5f40c4dadaaf6a0e24d40034b4d2d1f2bdece8784beecaffbeb974d531468d3606ccec0e8dad6ed60c9c5f54e82fd9ed2d180f6efa1257dd4f7c17b4f36a5a0ed15a36d82fa62ec9f7be0fe39b0f3727e544f1e75b95f4e5fc0a313c973517e7e31fdf1a9b627002", 0xc0}, {&(0x7f0000000100)="a506ab63b9773a729d73896bec4eff9236e76ab877bb50af33a57a01b2ce251fb7afdaedec310d0c478c90c705595c094c3c18eb278f", 0x36}, {&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000280)="cb835026c30bec", 0x7}, {&(0x7f00000002c0)="e8aa616fee4c2259344c9a6b67ef33041e546bf7c7037ed103e6346caab7007b065bb51ce9e2", 0x26}, {&(0x7f0000000300)="688ce1e106a5dd3cf889686aed3da94ce8c62fdd405387cfc38bc65e8cfa5f7a02ac7bf473a440dbdc37b01d3f90aee6d6d793e65d489be15b7aebf46f0747bf63b3ecc787a47274d096677f9e002830c7dcd62c3ad0cf8a51c4093601d83bbaf7dff1bf797028618d9c0917fba3ac60e1fbbdfcd6a698fc8a3931d540d01b67aede7ee4258a0aa35fbce86bcc95808291e305216da609d14ef48d82f893094b1121fc40cb944cbea9c402e1a77ecf0b711691f1a59b7ad46dcc335d67e929f8269e86e742d91bcca110bdfca7071f11dca6ae75138743c4a3b1c876056360773622cd3d29b42c3dd08e814f08e884ca36bfbba20df6de68", 0xf8}], 0x6)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:43:43 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0xc}, {0x6, 0xfffffffffffffffd, 0x0, 0x9}]}, 0x10)

16:43:47 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000012c0)={'raw\x00'}, &(0x7f0000000040)=0x54)

16:43:47 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = getpgid(0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x404000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000080)={0x0, <r3=>0x0}}, 0x10)
fcntl$setpipe(r0, 0x407, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x13, &(0x7f0000000040)='/dev/snd/controlC#\x00', r3}, 0x30)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:47 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000f0197f08b2a33896162150620576cc36b2d4f3609dd47456c70ea453a9eb2de34666315d96de8ff4aed40ccbe9fbccd4ed1dfcf83b51c6abaf89a381248461986f0eb3d8ff01898960d668757c34200000000000000000000000000"], 0x10}}], 0x1, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000100)=0x1)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x701040)

16:43:47 executing program 1:
unshare(0x24020400)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
pread64(r1, &(0x7f0000000200)=""/76, 0xfffffffffffffee0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x100000001, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000081)

16:43:47 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x3}}, 0x18)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x2, @mcast2, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="6759a22591fa823710a56d102c0598ac7003ac715b96eccc01e67d810d086ad607149b4fb6aa33efccd0b4acd53db55d627a4f00c028b1e26ed11df204f5c54604fa57d68a7b450b6524c6f4", 0x4c}, {&(0x7f0000000180)="6430291239a5ad43399e97ac7d9ea667de497cc5faca0fbbe7e55503ca2ee9a5475ceb3fa78d4c5ca7069c291e7443ec702629cb875abb363309f107794869d88c65a3b2e128b0e1d7778eca30b929f5efbcbb0b7bb70af21dcdcf4f0b88e6d57418e0d9dda48a82003414602dc3ad78da7220abf479a958b4b868d03467948221df14f67e59a9ebdbd6a31ad3a8963288ccebed945dbb7622e9cb78a057ddeed4c99e70cc36725ff4df2f2c45be85f9950a3cf9b7da31689e544c0de9896e88a1e8d8d7688033b7f677fe703743051aaee0f100a2", 0xd5}, {&(0x7f0000000280)="8f6cb76a9d59e98447105551e8bb2f6456eb2a72caac74b7a6bd76275519ce75e7e6a2bb5b4d5ec13d64a7792088957c9aeb5909e616802a07bc2b2d4a7b60", 0x3f}], 0x3, &(0x7f0000000300)=[{0xe8, 0x1be, 0x100000000, "515334697e3e3f05c3e2aee3825eec7e20a579a8dc721582ced5b31a3d8ce2e2ad8349191ca4ff4aa466a7d768b227fde45d5f8f54f8e27f2c8e27d97ce4a1dfc3b302513261cbfb8c80728d9f509c23ff9ff0f8f8e08d84d9177de864c19c8cbb1bd08158117540b73c47e66f128fe15e4980757f78c93e0afd494ca284026108d17b7f0e3cb67217ac44d9e4ee37f94734872ff7d7c36e658abe1caa6e69610e7fc459f913c6e298cd18cb46fe6785c35fc3413fe265a07f35a3192fe0fb270fdce5f43eaa2c92f6ba327992834f2a9c69cef62f2b44be"}, {0xb8, 0x117, 0x400, "7aaa299707cc0b1b0acc8c40596a35ecaf2d9a0a689d89e0672de10f6139190c98cbc8743f7f7c59b28c47a906ff0aa6339ba18012e26e0c33405b4f3d977e9ea2b81a7d26ac3e958298470773776079f2093074b79f4c84acecc69491dbfe35bbd62bfcf288f1e838cc8634c77d313ad8a827e6cb28ffdafcf8a3bf28be653ce550b3ada59fd7a39bf5a67ec39419ea309edae4691e6f9751e90770297a399f7468"}, {0x78, 0x11b, 0x97f, "e3b0ce52f08ae96367ee6b0da7614add6fb1358f107e38c6032321cadeb42bed7c35a5f78f4b717431da3e28de336cd8716a328c6dc900d4a603e4f2877c3dd12d7ef530668669ebf2772e5ac9ae8d7c28c14ffa71a7a8b966b6979d52a55c222b1b93026e70"}], 0x218}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x6, 0xf7, &(0x7f0000000580)="5e0d8c0b0b50", &(0x7f00000005c0)=""/247, 0x1}, 0x28)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000740)={0x7, 0x70, 0x4, 0x0, 0x69c, 0x5, 0x0, 0x0, 0x200, 0x4, 0x3, 0x4, 0x10000, 0x7f, 0x100, 0xfffffffffffffff7, 0x3, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0xf5, 0x2, 0x8, 0x10001, 0x1, 0x101, 0xdf2c, 0x9, 0xfffffffffffffffa, 0x1, 0x6000000000000000, 0x5, 0x4, 0xffff, 0x0, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000700), 0x1}, 0x224, 0xfe00000000000000, 0x0, 0x7, 0x0, 0x100000001, 0xfffffffffffffffb}, r1, 0x6, r0, 0x8)
ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000800)={0x7, 0xdb6, 0xffffffffffff8001, 0x1, 0xffffffffee2bd2b3})
ioctl$NBD_CLEAR_QUE(r0, 0xab05)
prctl$PR_SET_FPEMU(0xa, 0x1)
ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000840)={0xc, 0xffffffffffffff65, 0x7})
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000008c0))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000a40)=0x5)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000b00)={r0, r0, 0x401, 0x55, &(0x7f0000000a80)="a4c71beefae0d7c5320e84e35f40ceee8a09adf0889d12d72eb17ea92c0064e4e90d59c50877c4582532a34a16ca63dc3f7b1ea230ece49d7fef090ea2d2b44b3ddc3da15600ae0d0c6c0b836202e2f2264d28aa8a", 0x8, 0x772, 0x59, 0x64d, 0x1, 0x2, 0xe7, 'syz1\x00'})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/ptmx\x00', 0x4800, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000c00)=@assoc_id=<r4=>0x0, &(0x7f0000000c40)=0x4)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000c80)=@sack_info={<r5=>r4, 0xff, 0x7}, &(0x7f0000000cc0)=0xc)
fcntl$setlease(r3, 0x400, 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80c6000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r6, 0x0, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000e40)='veth0\x00', 0x10)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000e80)={{0xff, 0x100}, 0x0, 0x4, 0xc60, {0x3f, 0x80}, 0x2, 0x7})
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000f00)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000f40)={r5, 0x9f, "4d67a6b6045698a35d349af7061d57400aa1c234303cebb7e41a812d04d8cbfcd9927144ba680fb3fb606c29f7899f6df27002080479b5d0e93f1fa8957d35c90951c6c97c88114d97f48c24673632cdc0bfebd05243a50c958f2fd15e289ccb742f7ba71f4c29e68c068977003e4922f4795dfa34747a394a81e95ecd6b87ed5459322d949cd2e4a167745ce8f35cb5515dae19384efec21158a9ef932b24"}, &(0x7f0000001000)=0xa7)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001040)={'nlmon0\x00', {0x2, 0x4e23, @multicast1}})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20040040)
ioctl$TCXONC(r0, 0x540a, 0x100)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000001180)=0x3)
fsetxattr(r2, &(0x7f00000011c0)=@known='system.posix_acl_default\x00', &(0x7f0000001200)='[\x00', 0x2, 0x3)

16:43:47 executing program 1:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xe, 0x3, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0xffffffffffffffff, 0x0)
r0 = semget(0x0, 0x2, 0x20)
semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f00000000c0)=""/51)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)

16:43:47 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)
sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x11}], 0x10}, 0xffff}], 0x12d, 0x0)

16:43:48 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/5)

16:43:48 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(serpent-generic)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f000000db80)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000380)="495de7f925f296831320c6b914fc2aa250ba36cdd1999b62b177209774a8a919d6fd62414d87b670975412380eb75549fb41c287452dcfcf9f18d3f87927d06cda5a26d3a47f49e19f2951bff18cefa4af36662d4c09cb30c7129fa56c393265340e92003fda1c4e1cc671c88e9443f7d55ea0271054ddadc2803a6a1f7c6e63930dca91279ed08339d92c10fe104ea8bffba4c702a2a1794db1c2c08ebcb63558a80fe51a72649ea73d4b6de073cd738eb80c1a0fccc0a1200872cd0c4c98768ab6a03a2e2beadf614640ed88cf83763571313313903779ce3424ef2cedb99f9f3046e99de019ebf9c594859ea6c19f9e029cd9346275985eeb7c2102667c695df5a76ba698e29ec1ab23bd2e85e899d90af53898f21868a4e96462cd03063b6d890b13b3819b131aa6c2d6ea74574f9b90c97b86f6a0d594491417e98f9f5e65b22d2d11ac7096b3abe1c406b4ed23578070ea4f28f4ad1acf25514546e7d17121d6c22a1083ceeb0d895d390f7f1c034b4ec8e0cda366b71f326a214c763bd1b9c9ed11873439f79eafb226b2adae701ad60feb4dab634845aeb1b940b4624f4543dc84d9c52a3f857f81f23124b0081b575a7d8c58d33cb00918223dfa239beecb1886378b228518b36b4bb0441c630ca4932ffa1261d054fcc7b62bd599159c006ca78239e5fcb79a2211286eff6694a487b4c12f3d39d96bbb7842ed1730cb531deeecad542d7d83933f7ccd49b30a3d6eca320c5aac1e3a2ca779a5ef65d50dbf48b9853b347a24ae4fa3e908611dd675f39f357e065e3663a38211e49a65849307cf3d9843a2b36141cb785e4d4678b004d3866cb2443c689e42f536803e7a95dce5ab07cee089394d70e8378ba7efa85cc57334460ba4fe06e228551a668c9c4f963e3abaca5840217695727d93400f1be157d452cb9728d9f61e870897ee7a8e342f4a8c9a05a03da8e46499b6738fe64f098c3cde2aecba249658be9a1c963599db7499ad7998ad6635d0813c15db6d63e54da2c082d3e7b914d8292e9dcb31ff7e4b3afd64fad704d39595ba63030e48fb8797bf7829dec85dc7a8767abef91860d67a85464c2f45b57bcf3ce563e9ae8dce5c9f4b8fdfd7f258ff54456c99b4126da0ec0bc3fc2befdb619608204f7f335370586a509b08428939a80774550d8a2e439be4d5096421b0e7373fb8f67c689c84c0c4b6c8be34d653f4b11e48e7724718d5016bed87dbce4176771287f54e50f03343573c53ab56c097bba229f8d98edb08e28e735d31c3e6e4e11292f06cd284cfe241d0c0d4fa25aac151bb8b770a80348f9dddc719760878823da283e24919b1eb4ae6257956856f789d9f691df599c63c63fb3a4199a30d62fc64d8ff9394cc179ae424a206894b2a2663a29ddcec5172a886946885f2003d8919dc62c791e9ae1d3b8c6723dad897e7ddd4733a0c17406a5a037866e200d0f74b52ec9c87849e68892a6950699a556b9b75d012e6100a964024f35664a3e77467ab15e3c29db4c1efd1c405776203afa289652f0b0b7b7b790908a91ddd2fbc35854ac307af575c17f67c527b3b552da4a4d1951a075403329607e7e091627b5155421e655302a9e4927740a44f35bfcc0d3182ca14e192fa265c0d74970caf415f76e0ed126c85118541cc286a78e9e2d089b0753731240c491e22419d5ac52541f82a4ebd9c2ee0d3fe9ab5830e5e234e8ab02aa3ea39bbcf5c04fe7417d562139e63013ec4424524905cff30a9b293a313ba5dec0d39107a961f9aca5a4508ba76efa8847a4c9ea41c711ce07accbd4826ee629689ecc620f000d94d677d37e760af193604fb8ff05b3701ff97059126c7864a011c4bcfbefaea8c7f76c3cf80c373d269e4f15054fc1d84026f1973e5f750e027988cc6c2665abfdb6511f89e10fcee83345a44d6d1b01f979c29d4955cc5494efc86a2cd724c8f609f3edc32722e34659734da25ee073c25fdfc3064c2e30b7117fed5d46ed8d7ac70853eff61a1db34657c9a3daf96b67b0b62bccb8dba7bd1e776ea3235290468236e664a6c0d7039edf9e3401f7216f2bca3ad9789110050288ab6bba240102c959654719e7be46dfa268d66251d9bb91741cd3ca1796ce3cd379f77e77640e1433ca2ff769789402dddf9e575bbc95b1c15d17fc5f72438225813b81b25e99e1e1c4fa09240a04de170113f77766f52ea07e655dcfa7655990036d18aff4564fbfbde91b95b52629c016f71c58336b7a5da656d5dafc544116a86b9daee1dc28b88f5d6ac88398f45d3182de6413256c342e66bd81c142fee8e5dbd3db4b0ef8fe77bc132e34ae7b685b00b1edce6e5cc3ab4ad44593e3ffcd758cd7c53aa249a64a846478580c03206d09ad9e63ada5c120ea32e6cac57b0de86a2e6cd73e63740e7078f9569d22dff6d6685b0655996c81237e08614c43c2090ea280003796e0ef8efb6ef6503fa0d1d2dfc468f45eb62a385f46890c500f44de9749ab4a86958a0441c8e8bd968debce14310e0b8cb250c2cafebceba643a261807b65924214157caaa14b4c066022b1252d0a8f8fd426bda51bde38a879c3f6e4375ea87284d1a85b8de393a98df24c62d8a2fef168f9ef14b17485f9bad7c06905f4d90fcad95dc5c05344091b00fa32af6cf978e49d01cc50e1fc27b0bf4092ec08f9ad4fa2a471bf153182b7e7fb9f43eb348f5210d42477ce567338544aaf6ab5b5da89cbb772017c222314d2c54eb01561a3d0e4a9f9627ac184cf8c937f499c1a0ec55b01fa01df0e0b2f4b5575306640f100cd643cdd9e36559cfcddfb21411049872fa856514ecabf816467ef2652600759f72bbd2c2607c01d0e18b06d4f2ffcb2a610427cf9df6429a31fc7f2b15bf0b26242efe975f73505210f20b47780427327079392025bcb4477b468a1ea915c8ced9e1dbab65dc4b1dbdcd5262fc3e8e51b40955352addb11403658cdf2f02c9f68abcfe25c1067238560b3c6d6c722bb98f1588d457763d9492f1c25abb69a6cd2d5ad3813d5698a5692ac91495eeb4dee9635d655c00338d4a6b7f9e1279a2ba4f07419147ec18614f09b83aa2af43d3b2c79e9adf8168a2f70a2e2c6201370e091827e55cd48db706064308c3e1a233e4f728cfb7f1ec6426af7826f084e3d2c1893bb44cdf6f0fb1f20c04f6f4f78bce092717c09aeb09daebbb99fade3e4c1f3fdea454e88351e4c2d29d89c0651de5b94152839382d26abb7141ae4f12d9cd9071d3274dd4c93d18c9f3124d00f32db4c3686a8d73bdb996a270a00ecc396a50ff4de562dd4432a4478d981723c1bd90d040ae60ea684aba14e2a8e8a032d7a872e5fa2bd2fefd78ff4187985a6a3aa64a8aff2ae42f1a9a1c1d26379838e53e00578fbcb064ac9aa71b7edcabfd98d86f8742a458c4b7bbfa710c92301fb83b2040f0e39d72fc8ee16a253bc7bc4008e57bcce0cc3d277d94e829b93ee2c4fedee6fa7a2ee4a987697bbd5eaeccea661e5b26ed859c5b30fc13a0522b7350a905479233fce16d546f08c1c47f0d19dd7b8ecd775deec9a630bf4ceb1605ce16850d7ff32030b4d09616f6a27afac34056a1c78536afa6cfc328b7c7cfafbd7be1ed6bcf8c4b095e5533e19ba5c3f86ead62b4d9428a20911f2e02225ad636fb8da6cec35c409c6babb3743981c6bfcf65ecf9dd7923c324096d8e0eb7957c905331bdaf30ccf4518e07e273120236fe7810dc3dc503fb7da3150193be7f98393eaafd4f7df52125e194224d6908b11f5e261443032cab36b9513147ab85df7383d4648dc11592091ef7b09ae4e5290d704b1ea1f7a0d7896d106cef3151793f2ea7813e18224864ea005b5572cdf74dd2355d380fc1d66be124e5632cdc27bee75cb1bf92eec624449201543015d6ad0e6248c5c1474cedf28281637fce145b6fc27be6d9adf882e0d26e90bfc8cc6cb0648ee796173be2fcf9172eb08312eb26b276553c3cb5e9d8870a59fbb3a7e54b98df5734b2fb828545b7c46e664c3423fa4223e9f37d2c951523faad29df5e124e41bacd362c5805a591b385a0069e74b9d57c2f5de695c1932ef32c9c4fbee3d6c43f829a8765923d56f44de092a8d2a05db006031cc570b5630186ec335ca1a837700d368bc49582a3ee87d359b16d4388f18836d0f2c4516954086915afb431344ef50cd0a6ecc7df51cdbb8e9cf36b76f0a0f518d6caf5a9c7596bf7c4c92ed1666d32bd65821138f38d580cf8a562f10e9cbb5b7e8760019061c4b596452900098349a9c19650243274e850f6eeff46e538bed52e5718bd4920bfd7f9d63ba34723012a8c6a0a8cad7384c6aa53aadfbccc3f9ea45eb957c6fb9bea31464ca0fbf1986cb2fd78d935cc4b5cac2ddecbdb38a2076b8a460a37d28844c7c3f0729f12b299aeece20139ff7b3f656b924161eb8107c26ffc480cad49e05c3f3c3e0b2cd52da9bd785afda3e91830ab4ea6508b8bf9dd9874d8fbb8464e3f0b86799f3b27943bf473d7bdd8bde7c103706b94b1a9a236770abc24b546a3bf9d672101154b5bd960525f20ea85f969e172e1641ae95d5eadce3af15304ba07accfa83cf49c73bceccb886746f1a4356ec77d4e5b8f589ef9a45ea1fc3f786b1ebaa6f53a48f215cfb8a7ac164038396baab6c21f1653c8b847eb09179ef6c1410da03e850f47423ec407ee9b99fe05a0587abb6a6c66158dc5", 0xd10}], 0x1}}], 0x1, 0x0)
recvfrom(r2, &(0x7f0000000300)=""/126, 0xfffffffffffffe42, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r3=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x16, &(0x7f0000000000)='pcbc(serpent-generic)\x00'}, 0x30)
ptrace$cont(0xffffffffffffffff, r3, 0x7, 0x51)

16:43:48 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/5)

16:43:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/148, 0x94}], 0x1, 0xfffffffffffffffc)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
preadv(r0, &(0x7f0000000480), 0x100000000000002e, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
select(0x40, &(0x7f0000000100)={0x6, 0xf43, 0xd805, 0x3, 0xd8, 0x7279d36, 0x1, 0x100000001}, &(0x7f0000000140)={0x3012a41c, 0x7ff, 0x81, 0x6, 0x80000000, 0x1, 0x832, 0x4747}, &(0x7f0000000180)={0x0, 0xffffffffffffff71, 0x401, 0x96, 0x7347, 0x7ff, 0x401, 0x2}, &(0x7f0000000200)={r1, r2/1000+10000})

16:43:48 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000))
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000013000/0x2000)=nil, 0x2000}})
setsockopt$inet_mreqsrc(r2, 0x88, 0x1, &(0x7f0000013ff4)={@remote}, 0xc)
dup3(r0, r1, 0x0)

[  238.293741] hrtimer: interrupt took 25544 ns
16:43:48 executing program 1:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000010007a)
ioctl$KVM_CREATE_VCPU(r0, 0x80045518, 0x90b300)

16:43:48 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xfffffffffffffff1)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000))
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/69)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080))
close(r1)

16:43:48 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r1=>0x0)
fcntl$setown(r0, 0x8, r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398417f1a})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10000)

16:43:48 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4)
bind$inet6(r2, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[  238.799392] IPVS: ftp: loaded support on port[0] = 21
[  239.031349] chnl_net:caif_netlink_parms(): no params data found
[  239.092712] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.099239] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.107185] device bridge_slave_0 entered promiscuous mode
[  239.115911] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.122464] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.130343] device bridge_slave_1 entered promiscuous mode
[  239.174830] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  239.185892] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  239.228252] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  239.236536] team0: Port device team_slave_0 added
[  239.243204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  239.251317] team0: Port device team_slave_1 added
[  239.257813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  239.266093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  239.446106] device hsr_slave_0 entered promiscuous mode
[  239.602650] device hsr_slave_1 entered promiscuous mode
[  239.752941] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  239.760072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  239.778305] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.784862] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.791585] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.798104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.840370] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.849672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  239.857663] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.865165] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.877341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  239.883728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.890928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.901205] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  239.907420] 8021q: adding VLAN 0 to HW filter on device team0
[  239.916426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  239.923607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.931772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.939519] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.946022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.956963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  239.964256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.972630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.980546] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.986951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.997403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  240.004744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.016320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  240.024157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.036285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  240.043770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.052220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.062492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.072713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  240.082836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  240.089609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.098383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.106507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.114666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.126805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  240.133764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.141790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.154035] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  240.160061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.178396] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  240.190392] 8021q: adding VLAN 0 to HW filter on device batadv0
16:43:50 executing program 3:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8440, 0x0)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)=0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x182, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0)

16:43:50 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0xff, 0x7, 0x100, 'queue0\x00', 0x4})
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))
fcntl$setpipe(r0, 0x407, 0x0)

16:43:50 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

16:43:50 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4)
bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1cc, 0x34, 0xa21, 0x70bd2d, 0x25dfdbfb, {0xe}, [@nested={0x1b0, 0x11, [@generic="1fefe3d5429e1acaca1bf49e7d8a1079d380c0c3b0394c1f1c27a9847f89b160f5050973b7256a7c45d911ed1e3f28a8f7612c2503e1ccb51072c137a8c502d3040559c8511dfb27ccc6f934ca104893cc6d6becec25a4d09fa337f35188f024730e3cf0b207a9acab0997082bc8d1bf02a08bb2481287be6adf3063fbd257361589f975ce259539023e7b557b385c5fab557fe8a078009d30799a24d319d4870b6c0fbee685dc68ff70873c2260fbadfcb0d50a19ccd99798dd3467e8", @generic="3bcc83a43c026430ad5b22fc6766769e9a3a8d193ece64f7eb40512a6637a4da8643796ee03369b82eee", @generic="fa24635199c8637ec916677421a15c10b9a544d9dec062a8c7eb31bf6362942f34aba440f2c0966c0d5961d1de2c832542260284f62fd106d2d8bae0d08c3354f0585278ac16a22ce898e5eb331a1ab58fc2e6bb8eb98f", @generic="5398fb7f269390d2584d3048470ab5c1fca269e2b74f970a218ea8e2ef23e7432de0a13a287f7bbc53bbdaeb4f1430cf349c7dd582a1bbfcfa8c79e6180b37bc3836addad9ec878dda40b5a54c4d5e98b89a47c8dcb7903f7db71878a7f4f373e66f", @typed={0xc, 0x8c, @str='*ppp0-\x00'}]}, @typed={0x8, 0x5a, @uid=r1}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x48040}, 0x40000)

16:43:50 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffe47, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e6ff000e001b0000000000"], 0x30}}, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xffffffffffffc68e, 0x200)
write$9p(r1, &(0x7f0000000280)="b776b0cd352e151919402894894609da36a4ee70f7046d01ee678ad013718e58133685d7e14b7abbd70871f6f5b9b0449fd2cdd3bbf6f1c357d6c1d91abb50976bbea08fa80a1a6f2a773c56fa19b7c7b618293ca660bac319fca4010708cb27e7e99436c4c750cb6a58249b61359173c92bfdc08bed755392f3fa32827e175c3ab7d0505f3021e28fdd47135f8a70120d7e987346251b769fbd22d6283a3e3bf76c3d31b05fc95b9fbab1a4dbc3921d288e2a48ccb21a7d8bbb5440edeb61b0", 0xc0)
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$read(0xb, r2, &(0x7f0000000140)=""/249, 0xf9)

16:43:50 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={<r2=>0x0, 0x1}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={<r3=>r2, 0x80000000}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r3, 0x10000, 0x1, [0x4d85]}, 0xa)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={<r4=>r2, 0x2}, &(0x7f00000001c0)=0x8)
write$P9_RSTAT(r1, &(0x7f0000000200)={0x5d, 0x7d, 0x1, {0x0, 0x56, 0x6, 0x8, {0x2, 0x4, 0x7}, 0x0, 0x1, 0x7, 0x5, 0xf, 'ppp1#cgroupem1f', 0xa, '/dev/null\x00', 0x3, '{+.', 0x7, ':vmnet1'}}, 0x5d)
r5 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x40, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000340)={@ipv4={[], [], @empty}, 0x79, r6})
sendto$packet(r1, &(0x7f0000000380)="cb64476144b1f1b53967a963c63da8c1dcc7403bb053cac7974bed9bc1d2a8ce72a4a885631dfe7a3dfe9e830108", 0x2e, 0x0, &(0x7f00000003c0)={0x11, 0x17, r6, 0x1, 0x3, 0x6, @broadcast}, 0x14)
read(r1, &(0x7f0000000400)=""/4096, 0x1000)
ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000001400))
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001440)={r4, 0x7fff}, &(0x7f0000001480)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000014c0)={r4, 0x7, 0x7ff, 0x3}, &(0x7f0000001500)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001540)=@sack_info={r2}, &(0x7f0000001580)=0xc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r5, 0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600)=0x4)
write$apparmor_exec(r1, &(0x7f0000001640)={'exec ', 'ppp1#cgroupem1f'}, 0x14)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001680)={r2, @in6={{0xa, 0x4e21, 0xffff, @loopback, 0x75c}}, 0x8, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x6}, &(0x7f0000001740)=0x98)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000001780)={{0x7, 0x0, 0x6, 0x5, 'syz1\x00', 0x2}, 0x1, [0x4, 0x100000000, 0x10000, 0x2, 0x7, 0x4, 0x1, 0x1, 0xc4fd, 0x100000001, 0x80000000, 0xb251, 0x1, 0x0, 0x3, 0x8, 0xffffffff00000001, 0xf5fc, 0xaf, 0x200, 0x0, 0x1000, 0x480000000000000, 0x7f, 0x9, 0x7, 0x7, 0x1000000, 0xffff, 0x3, 0x6, 0xc78, 0x4, 0x1, 0xb73, 0x1, 0x5, 0x8001, 0x0, 0x80000000, 0x1f, 0x1, 0x200, 0x9, 0xc29e, 0x3, 0x3, 0x1f, 0xd85, 0x4, 0x7, 0x8, 0x3a6, 0x400, 0x9e0, 0xfffffffffffffff8, 0x5, 0x1, 0x3050, 0x80, 0x3, 0x7, 0x3, 0x20, 0x10000, 0x7, 0x8, 0xf9, 0x5, 0x6, 0x0, 0x3, 0x200, 0xbbe, 0xf75, 0x2, 0x7f43, 0x6, 0x9, 0xc86, 0x9, 0x100, 0xdb19, 0x7fffffff, 0x57, 0xff, 0x8, 0x3, 0x8000, 0xfffffffffffffff9, 0x2, 0x3, 0xffff, 0x6, 0x575, 0x7ff, 0x0, 0x2, 0x2, 0x4, 0x1, 0xfffffffffffffffd, 0x2de, 0x0, 0x4, 0x6, 0x6, 0xfa8, 0x1, 0x6, 0xffffffffffffffff, 0x2e46, 0x401, 0xcd, 0x2, 0x101, 0x6, 0x9, 0x9, 0x6, 0x9, 0x0, 0x58decbf4, 0x20, 0x20, 0xffffffffffffffff, 0x0, 0x3], {0x77359400}})
ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000001c80)={0x9, 0x95a, 0x9394, 0x66, 0x8})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000001cc0)={@host})
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001d00)={0xab9})
r8 = msgget$private(0x0, 0x1)
msgctl$MSG_INFO(r8, 0xc, &(0x7f0000001d40)=""/234)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001e40)=0x7, 0x4)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001e80)={r3, 0xffffffff}, 0x8)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000001ec0))

[  240.418715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  240.439103] netlink: 'syz-executor1': attribute type 27 has an invalid length.
[  240.453888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
16:43:50 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

16:43:50 executing program 2:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="823c26874d8314864605149616536e359ecd9811d1d5851e77132f796bd9c7d2aae1314e6d2d", 0x26, 0x0, 0x0, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82)
r1 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)

16:43:50 executing program 0:
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x20040, 0x0)
tee(r0, r1, 0x3, 0x8)
r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x8000000, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0x2, 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000240)=""/5)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000080)={0xa, 0x4, {0x57, 0xd6, 0x1, {0x3ff, 0x1}, {0x7, 0x6}, @cond=[{0x3, 0x0, 0x7, 0x7fff, 0x800}, {0x401, 0x4, 0x7, 0xfff, 0xfffffffffffffff9, 0x1000}]}, {0x57, 0x5, 0xfff, {0x0, 0xe9}, {0x1, 0x2}, @period={0x5f, 0x8, 0x3, 0xb85, 0x9, {0x9, 0x6, 0x1, 0x8000}, 0x3, &(0x7f0000000040)=[0x100000001, 0xc3, 0x100000001]}}})

[  240.648858] netlink: 'syz-executor1': attribute type 27 has an invalid length.
[  240.664011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
16:43:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCOUTQ(r0, 0x802c542a, &(0x7f00000000c0))

16:43:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c)

16:43:51 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000600)=""/227, 0xffffffff00000018)

16:43:51 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0xfffffffffffffff9, 0xfffffffffffffffd)
r1 = dup3(r0, r0, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x400, 0x8fa0000000, 0x8000})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfff, 0x63, 0x1})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:51 executing program 2:
mkdir(&(0x7f0000001000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00N\xbb\b\xb8\x19e~\xfa\x8dj\x1e\xfcB\xa7l\xf0ZPb\xde\x14\xa9\x94g\xb3\xb9m^\xce\xc0\x95\x00\xb61=\xde\xee\xbd\x94\x91\x90\xe7\xed\xdbT^\xaa\x84H\xf5\xb0Y\xcf,\xcf\xd5\xd7\xc8H\xe1\xf8\'\xb4\xdbU\xbcu\fu\xa7\xeeO\x8cr\xae!\x84g\x1d\x9b\xc63../:\r/<\xf5!\xf4\x8f\x06B\xee\xcc}\xaa\xc6A\x17T\v\x80\xd9\x15\x01\x96<\x8b\x87\xbf{\xd00\xca\xd8O\x94\xefy\xc1\xed\x94\xd4\xc9\x82D\x1d\xda\xfc^\r>\xb74\x17\xf4\xa5uyI\x8a\x80T\x9b\xe9Y}\xbe\x0e\xf7\xd5\x02\xee\xf4\x1a\x8dx\xcc\x86\tVB\x85\xfaX\xd0]4\xe2ED\xee2Z+K|j3\xbc\xe0', 0x0, &(0x7f00000000c0)='\xa3')

16:43:51 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

16:43:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0})

[  242.151000] binder_alloc: binder_alloc_mmap_handler: 10551 20001000-20004000 already mapped failed -16
[  242.177711] binder: BINDER_SET_CONTEXT_MGR already set
[  242.183216] binder: 10551:10552 ioctl 40046207 0 returned -16
[  242.195337] binder: release 10551:10552 transaction 3 out, still active
[  242.202305] binder: undelivered TRANSACTION_COMPLETE
[  242.212428] binder: send failed reply for transaction 3, target dead
[  242.224121] IPVS: ftp: loaded support on port[0] = 21
[  242.384970] chnl_net:caif_netlink_parms(): no params data found
[  242.430486] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.436951] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.444653] device bridge_slave_0 entered promiscuous mode
[  242.453519] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.459989] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.467617] device bridge_slave_1 entered promiscuous mode
[  242.487588] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  242.497173] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  242.516701] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  242.524342] team0: Port device team_slave_0 added
[  242.529951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  242.537840] team0: Port device team_slave_1 added
[  242.543421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  242.550998] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  242.604268] device hsr_slave_0 entered promiscuous mode
[  242.642268] device hsr_slave_1 entered promiscuous mode
[  242.693038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  242.700315] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  242.721361] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.727893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.734963] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.741428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.807232] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  242.813454] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.822646] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  242.832671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  242.840480] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.847834] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.855506] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  242.868693] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  242.874962] 8021q: adding VLAN 0 to HW filter on device team0
[  242.886454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  242.894801] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.901274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.923148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  242.931056] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.937561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.950649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  242.959726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  242.971189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  242.986086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.998573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  243.009259] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  243.015424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  243.030501] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  243.043000] 8021q: adding VLAN 0 to HW filter on device batadv0
16:43:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xad60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:43:53 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x34)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

16:43:53 executing program 0:
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:53 executing program 2:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x914, 0x0)

16:43:53 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e)
close(r2)

16:43:53 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

16:43:53 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty=[0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0xb, 0x228, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

16:43:53 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
munlockall()
munlockall()
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:53 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, '\xdd\xfb\xe3m\xe3\xf9\xb5\xe3\xe0\x04\xbc\xc0\xaeM\xe5\xd4\xe81\xc6\x8bl)V\xc2\x87Dv\xee\x83\xe4\x17EOhL\xabjq\xb19dN\xa9z'})

16:43:53 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty=[0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0xb, 0x228, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

16:43:53 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

16:43:53 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:53 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:43:53 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @dev}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12b0}, 0x2}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000005f80)={0x5, 0x2a})
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1})
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r4+30000000})
socket$nl_route(0x10, 0x3, 0x0)

16:43:53 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000180001010000000000000000020000000004fd01000000ab8035ffb09f000047"], 0x24}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x508, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x88c4)
clone(0x100, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

[  243.773215] protocol 88fb is buggy, dev hsr_slave_0
[  243.778667] protocol 88fb is buggy, dev hsr_slave_1
16:43:53 executing program 2:
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x8002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)

16:43:54 executing program 0:
r0 = socket$kcm(0xa, 0x5, 0x73)
sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="10000000c6b100000100000000000000"], 0x10}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101000, 0xc9)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x858, 0x3c4b, 0x6a4, 0x0, 0x0, [], [], [], 0x10fa, 0x5644})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)
alarm(0x6)

16:43:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

16:43:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&\"\"\x00\n\xc0\xf9*`\x00lJ\x94xd\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\x02K((\xb1\x82\xb2p\xbb\xf3\xdd\xbar\xaa\xbfYe\xd7\xa37\xc0\xae$\xb1*\xeb\x00\xb5x\x7fV-W\xeb\x9c\xf5\xe5 d\x99]O\x13\x99uJ\xbd\xefe\x83\xc2\x17~\x9e\\\xac\x1f\x93')

16:43:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="17c9"], 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  244.162447] cgroup: fork rejected by pids controller in /syz0
16:43:54 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0)

16:43:54 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x0, 0x6, 0x6, {r1, r2+10000000}, 0x80, 0x3})
r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/133)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000240)=""/5)
accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c)

16:43:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="17c9"], 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:43:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:54 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x4394, "8b"})

16:43:54 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)})

16:43:54 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x5, 0x0)
clone(0x90000000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:54 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10)
write(r0, &(0x7f00005f1fe3)="c6", 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x10001}, 0x8)

16:43:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/98, 0x62}], 0x3}, 0x0)

16:43:55 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

16:43:55 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="00ecc988131e81c6870a9d1c17f45a6254c2b360b0e354bea93e9b04054212fb05000000cb5983ae84960ce36d9614f8097ad0bd716f08a90000efb1ad02380c450cfaf3672c02e902401926298baf65a02f852c39a14973221de34462de1afd42a371bf5cdcdb275b276f48a482b781752b510c51275979c235b66cc16be2f82cbbb7216e53fe35f80a5c633ca18894e2825f8762f113c08730", 0x9a)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280))

16:43:55 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x18bb, 0x4, [0x6]})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000946fff)={r0, &(0x7f0000fd1000)="ee", 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:55 executing program 2:
r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0)
write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='#! ./file0\t'], 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

16:43:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000946fff)={r0, &(0x7f0000fd1000)="ee", 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:55 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:55 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5)
sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0xc, 0x0, 0x8}], 0xc}}], 0x1, 0x0)

16:43:55 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r1, 0xf}}, 0x10)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000180))
r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0xfffffffffffffffc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x7fff, 0x4)
clone(0x80000000, 0x0, 0x0, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000240)=""/5)

16:43:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000946fff)={r0, &(0x7f0000fd1000)="ee", 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:55 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0)
write(r0, &(0x7f00000002c0)="00ecc988131e81c6870a9d1c17f45a6254c2b360b0e354bea93e9b04054212fb05000000cb5983ae84960ce36d9614f8097ad0bd716f08a90000efb1ad02380c450cfaf3672c02e902401926298baf65a02f852c39a14973221de34462de1afd42a371bf5cdcdb275b276f48a482b781752b510c51275979c235b66cc16be2f82cbbb7216e53fe35f80a5c633ca18894e2825f8762f113c08730", 0x9a)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280))

[  245.476244] Unknown ioctl -2147199535
16:43:55 executing program 2:
prlimit64(0x0, 0x0, &(0x7f00000000c0), 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000b80), 0xffffffffffffffff)
socket$pptp(0x18, 0x1, 0x3)

16:43:55 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

16:43:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000946fff)={r0, &(0x7f0000fd1000)="ee", 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:55 executing program 2:

16:43:55 executing program 0:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x20000)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4)
ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040))
r1 = syz_open_dev$sndctrl(0xfffffffffffffffd, 0x0, 0x200000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:43:55 executing program 3:

16:43:56 executing program 2:

16:43:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

16:43:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000946fff)={r0, &(0x7f0000fd1000)="ee", 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:56 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x20800, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x81, 0xe, 0x4, 0x201800, {0x77359400}, {0x1, 0x8, 0x3, 0x8, 0x9, 0x87, "65c1601b"}, 0x4, 0x2, @userptr=0x8, 0x4})

16:43:56 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f00000000c0)=[0x2], 0x1, 0x0, 0xfffffffffffffffc, 0x1000, 0xee, 0x8, {0x8, 0x7fff, 0x4, 0x8, 0x17, 0x9, 0x0, 0x5774, 0x7, 0x4, 0x0, 0x0, 0x6, 0xfffffffffffffff8, "7a4d7944ebd3e77480c85175355ca31c2a86fb63812ad571e8e147eeee4d5725"}})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000))
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

16:43:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

16:43:56 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000000a7c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3)

16:43:56 executing program 3:

16:43:56 executing program 1:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

16:43:56 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:43:56 executing program 3:

16:43:57 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:57 executing program 1:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

16:43:57 executing program 2:

16:43:57 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140))
clone(0x1000000001000000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x10080)
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x101, 0x20000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b8010000000f01d9430f35363e400f08c4a1fc109b17000000f0802f0066b812008ee866b86c000f00d866baf80cb824f9f886ef66bafc0cb8841f0000ef67430f013eb9380b0000b8e09c0000ba000000000f30", 0x54}], 0x1, 0x4, &(0x7f0000000140), 0x0)

16:43:57 executing program 3:

16:43:57 executing program 1:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

16:43:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
tkill(r2, 0x1000000000016)

16:43:57 executing program 2:

16:43:57 executing program 3:

16:43:57 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x52000, 0x0)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/230)

16:43:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:57 executing program 3:

16:43:58 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:43:58 executing program 2:

16:43:58 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:43:58 executing program 3:

16:43:58 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$radio(&(0x7f0000005580)='/dev/radio#\x00', 0x0, 0x2)
getpeername$netlink(r1, &(0x7f00000055c0), &(0x7f0000005600)=0xc)

16:43:58 executing program 3:

16:44:00 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
tkill(r2, 0x1000000000016)

16:44:00 executing program 1:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:00 executing program 2:

16:44:00 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x4})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:00 executing program 3:

16:44:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:01 executing program 3:

16:44:01 executing program 2:

16:44:01 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x0, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:01 executing program 3:

16:44:01 executing program 2:

16:44:01 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x100000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x29)
time(&(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
tkill(r2, 0x1000000000016)

16:44:03 executing program 3:

16:44:03 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x0, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:03 executing program 2:

16:44:04 executing program 0:
syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000003580)='/dev/input/mice\x00', 0x0, 0x4000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xb20, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000003600)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/5)

16:44:04 executing program 5:
connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x100000000009)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:04 executing program 3:

16:44:04 executing program 2:

16:44:04 executing program 5:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:04 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x0, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:04 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x4, 0xffffffff, 0x1)

16:44:04 executing program 3:

16:44:07 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:07 executing program 2:

16:44:07 executing program 3:

16:44:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x0, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:07 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:07 executing program 0:
r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={0x0, <r1=>0x0, 0x7fffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x6, 0x3}]}, 0x10)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={<r2=>r1, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r2})
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r0)
r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0xaa, 0x9, 0xb3})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x3, 0x2}, 0x10)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000240)=""/5)

16:44:07 executing program 3:

16:44:07 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000000, 0x0, "35be7e06b2f6687f0f9c0524a210993b210c5a514f12cbdfeae3b88650e4031c"})

16:44:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x0, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:07 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x0, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:07 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000001, 0x8210000000000084)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x10001)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x90, 0x1}, 0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")

16:44:08 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:08 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x81, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4)

16:44:08 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x0, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2000})

16:44:08 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:08 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, 0x0, 0x0)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:08 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x0, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:08 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000001, 0x8210000000000084)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
listen(r0, 0x10001)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")

16:44:08 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x410000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e21, @broadcast}})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:08 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:08 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x0, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:08 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x14)
close(r2)
close(r1)

16:44:11 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:11 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:11 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x8004, 0x4, 0xe, 0x8, 'syz1\x00', 0x20})
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x4, 0x7, 0x800, 0x6, '\x00', 0xd5})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0xd04, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0xe4d, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={<r3=>0xffffffffffffff9c})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0xa, [], 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/10}, &(0x7f00000001c0)=0x78)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
write$P9_RSTATFS(r1, &(0x7f0000000400)={0x43, 0x9, 0x1, {0x2, 0x7, 0x6, 0x8001, 0x5, 0x3, 0x5, 0x4, 0x1}}, 0x43)

16:44:11 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2000000000002, @broadcast, 'bridge0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0)

16:44:11 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:11 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:11 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x2, 0x200000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:11 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)

16:44:11 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, &(0x7f000066d000)}, 0x10)

16:44:11 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)

16:44:11 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

16:44:11 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

[  262.782304] device bridge_slave_1 left promiscuous mode
[  262.788016] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.873303] device bridge_slave_0 left promiscuous mode
[  262.878948] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.005994] device hsr_slave_1 left promiscuous mode
[  263.046308] device hsr_slave_0 left promiscuous mode
[  263.086295] team0 (unregistering): Port device team_slave_1 removed
[  263.096833] team0 (unregistering): Port device team_slave_0 removed
[  263.107573] bond0 (unregistering): Releasing backup interface bond_slave_1
[  263.146639] bond0 (unregistering): Releasing backup interface bond_slave_0
[  263.220481] bond0 (unregistering): Released all slaves
16:44:14 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)

16:44:14 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:14 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:14 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
tkill(r3, 0x401104000000016)

16:44:14 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/5)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x400, 0x400400)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/205)

16:44:14 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

16:44:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:14 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

16:44:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:14 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={0xffffffffffffffff, &(0x7f000066d000)}, 0x10)

[  264.644267] IPVS: ftp: loaded support on port[0] = 21
16:44:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:14 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, 0x0}, 0x10)

[  264.837694] chnl_net:caif_netlink_parms(): no params data found
[  264.917130] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.923626] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.931022] device bridge_slave_0 entered promiscuous mode
[  264.939230] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.945846] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.953557] device bridge_slave_1 entered promiscuous mode
[  264.977077] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  264.987866] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  265.011840] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  265.020489] team0: Port device team_slave_0 added
[  265.027916] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  265.036240] team0: Port device team_slave_1 added
[  265.042269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  265.050383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  265.104793] device hsr_slave_0 entered promiscuous mode
[  265.142715] device hsr_slave_1 entered promiscuous mode
[  265.182584] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  265.189846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  265.207890] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.214389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.221249] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.227779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.272420] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  265.278574] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.289271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  265.299457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  265.307406] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.314587] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.324134] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  265.337428] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  265.343576] 8021q: adding VLAN 0 to HW filter on device team0
[  265.354975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  265.362762] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.369138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.380383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  265.388666] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.395144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.424420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  265.432981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  265.440914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  265.453793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  265.461267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  265.473655] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  265.479746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.498924] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  265.513131] 8021q: adding VLAN 0 to HW filter on device batadv0
16:44:17 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:44:17 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, 0x0}, 0x10)

16:44:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4(r1, 0x0, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:17 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x0)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:17 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/5)

16:44:17 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
tkill(r3, 0x401104000000016)

16:44:17 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fcf000)={r0, 0x0}, 0x10)

16:44:17 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180))
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000100))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={<r1=>0x0, 0x80000, <r2=>0xffffffffffffff9c})
time(&(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1, r3})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0xb5, 0x5, 0x45a, "54f2da5b2a0616a6a4f3299670a1ba31", "3eefc5ea75a50d8a125bfe1ee7cab5c88aec96517fa549e8f9afc5b747da2fe5f8b70657e7aec4ad7d1461aa783e9fa1d394711f694784b1e2b154b5e9b70d77e07bf56623a1e14db21d64adbb5ec0840e129d67e89d2009f81db06ad07e1d079a2f78402a026b7d61b9102eb1af70f706e861d95ca696f4a14f8f4c718015420f7fcc1439a6260657acacfe4a09a6c1f366aa792374ce431b3b0e29c55c56fe"}, 0xb5, 0x1)

16:44:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, &(0x7f0000000040)=""/74, 0x0, &(0x7f00000000c0)})

16:44:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

16:44:17 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x6d1a, 0x59f5f8ba, 0x624cbdfa, 0xee58, 0xfffffffffffffff7})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:17 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980901})

16:44:18 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:44:18 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0xa82000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:18 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980901})

16:44:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4(r1, 0x0, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:18 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:20 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
tkill(r3, 0x401104000000016)

16:44:20 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980001})

16:44:20 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/86)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:44:20 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000011c0)=0x24e)

16:44:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4(r1, 0x0, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:20 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:44:20 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:20 executing program 0:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x12040)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040))
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

[  270.505127] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0!
16:44:20 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:20 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000140)=""/5)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="9c000000f9720274625c1fbc4fd7a5fd3f0fbf746c298fc7dc7cd54440b8200000000000000003c80532a7a2267392055143b2936676d9c2f6d4f5674499b3478493689ef11e558b6f44f1bc113f62ca75196e1a9f81cc34de237d1eca2b6d0e3a12af3d7fed1b9cd926e512e444782bb4fbd2f73504c33d972d9b81e8adcee4b01e8a9b65993627da187c0d6cb1e7e30ced178b91ac129b2bcb67afe6b6a77fd5ed"], &(0x7f0000000240)=0xa4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0x40, 0x6, 0x3, 0x5, 0x401}, 0x14)
finit_module(r0, &(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2)
r2 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x80000002, 0x20000)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0xffffffff, 0x5, 'syz1\x00', 0x8}, 0x6, 0x0, 0x3, r3, 0x9, 0x9, 'syz0\x00', &(0x7f0000000180)=['/dev/vcs#\x00', '/dev/vcs#\x00', '\x00', '$cpuset%)\x00', '/dev/snd/controlC#\x00', '/dev/vcs#\x00', '\x00', '{trusted\x00', '{\x00'], 0x48, [], [0x60000000, 0x5, 0x7c48, 0x1000]})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x6, 0x3, 0x8})

16:44:20 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:20 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x22001, 0x0)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x400)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:23 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x800000000003, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
socket$caif_seqpacket(0x25, 0x5, 0x3)

16:44:23 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, 0x0, &(0x7f00000011c0))

16:44:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:23 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:23 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:44:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x53, r2})
r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000180))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x200000)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0x8001, 0x3})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000280)={0x1ff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x100, 0x0)

16:44:23 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:23 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:24 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4$alg(r0, 0x0, 0x0, 0x80000)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:44:26 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:26 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x10001)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:26 executing program 5:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f0000000100), 0x0)

16:44:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:44:26 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:26 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:26 executing program 0:
socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040))

16:44:26 executing program 4:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:27 executing program 4:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:27 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/110)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x3, 0xdd3e, 0x8})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:27 executing program 4:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:29 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:29 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x804, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x48004)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x125, 0x80}, 0x40}, 0x10)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7ff3, 0x3ffffe)

16:44:29 executing program 4:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000016)

16:44:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:29 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sysinfo(&(0x7f00000007c0)=""/154)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})

16:44:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:44:29 executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980902})

16:44:29 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:29 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:29 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x80, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0xf, 0xa, 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f00000000c0)={0x9, 'syz1\x00'})
write$binfmt_elf64(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4000000000000000, 0x10001, 0x7, 0xc6e, 0x1, 0x3, 0x6, 0xcbab, 0x297, 0x40, 0x1a0, 0x0, 0x1, 0x38, 0x2, 0xff, 0x1573, 0xfffffffffffffffd}, [{0x7, 0x6, 0x10001, 0xc096, 0xa22, 0x7, 0x5, 0x6}], "6ffacdd4a8bbe971d2e242008353628c5ba6e208cd0d9a53401fbee329d3b273c03ab4efc68bc6b1f89f8b64de212c19c7245fbcd296dbd0ef3b586cb4ec96458e47ed1dc166517db80367eb4673c8e57300bb1cb252824612a7f0566f5e9a0b0291196def505c84ceed759840f3bcc535b0d33021d9d65785077ff66f184ddb24d9d9d6bad56a82a9900d20e41db1a967b055bcd53c6d8d5d78ac9afc5a60c3cd7b91fe9c245bfaed0f8cc4c86c3eea9165da51", [[]]}, 0x57f)
r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x401, 0x4000)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={<r4=>0x0, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x1b}, 0x5}}, 0xbe18, 0xfffffffffffffffb, 0x35, 0x200}, &(0x7f0000000280)=0x98)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000002c0)=r4, 0x4)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000140)={0x1, 0x1, [0x2, 0x9, 0x0, 0x80000000, 0x8, 0x5bd0c895, 0x2, 0xc0000000000000]})
accept$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
write$apparmor_exec(r1, &(0x7f00000003c0)={'stack ', '\x00'}, 0x7)

16:44:29 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:29 executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980902})

16:44:30 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000300)={0x10000000})

16:44:30 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

[  280.576536] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0!
16:44:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:30 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x20000dc0], 0x0, 0x0, &(0x7f0000000dc0)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108)

[  281.084462] kernel msg: ebtables bug: please report to author: bad policy
16:44:31 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xeac, 0x200000)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x1, 0x9, 0x9, 0xfffffffffffffbff, 0x80, 0x3]}, &(0x7f0000000080)=0x10)

16:44:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:31 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(0x0, 0x401104000000016)

16:44:31 executing program 5:

16:44:31 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:31 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:31 executing program 5:

16:44:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:32 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{0x0}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:32 executing program 5:

[  282.353498] device bridge_slave_1 left promiscuous mode
[  282.359851] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.455195] device bridge_slave_0 left promiscuous mode
[  282.461442] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.532703] IPVS: ftp: loaded support on port[0] = 21
[  282.655471] device hsr_slave_1 left promiscuous mode
[  282.710695] device hsr_slave_0 left promiscuous mode
[  282.760152] team0 (unregistering): Port device team_slave_1 removed
[  282.772869] team0 (unregistering): Port device team_slave_0 removed
[  282.784983] bond0 (unregistering): Releasing backup interface bond_slave_1
[  282.862435] bond0 (unregistering): Releasing backup interface bond_slave_0
[  282.945249] bond0 (unregistering): Released all slaves
[  283.073274] chnl_net:caif_netlink_parms(): no params data found
[  283.123257] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.129734] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.138017] device bridge_slave_0 entered promiscuous mode
[  283.152139] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.158633] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.166620] device bridge_slave_1 entered promiscuous mode
[  283.192637] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  283.203471] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  283.228219] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  283.236495] team0: Port device team_slave_0 added
[  283.242629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  283.250655] team0: Port device team_slave_1 added
[  283.294276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  283.303375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  283.370466] device hsr_slave_0 entered promiscuous mode
[  283.448126] device hsr_slave_1 entered promiscuous mode
[  283.552955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  283.560430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  283.583212] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.589806] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.596874] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.603379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.668891] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.679869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  283.693984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  283.711962] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.723326] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.749448] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  283.755683] 8021q: adding VLAN 0 to HW filter on device team0
[  283.782157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  283.790923] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.797577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.880186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  283.888815] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.895407] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.905239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  283.915353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  283.924303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  283.936576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  283.963314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.983873] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  283.990318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  284.006794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  284.040617] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  284.056122] 8021q: adding VLAN 0 to HW filter on device batadv0
16:44:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:34 executing program 5:

16:44:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{0x0}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:34 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf25010000010000000009410000004c0018000000086962000000000000000000000000000000000000000000000035ca685968d007528166adc034a459e41423ad00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4804)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0xffffffff, 0x2, 0x8, 0x8, &(0x7f0000000100)=[{}, {}]})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x6, 0x1})

16:44:34 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r1, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:44:34 executing program 5:

16:44:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{0x0}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:34 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:34 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:34 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt(r1, 0x6, 0x7, &(0x7f0000000000)="9fc65edc0fa18859af15d80830a794d7a2519fbb5fc1b896e046e5736613d532d69d0490a4376c33bf98459c7228fb4194dabb98b73482c7e6395db0e52cdab68f5ac686749f2b1770a667097e13dab87a7dfbaff199a1597fe93ead53fa8b72ee8b5dbf9877af903b67d23226d72f66eed389cc696e555be252329fe1878d0722c2808da67fe270af22470442a96ac524060ae2d7a7a73101f1b2a101353c96fbe79bef1c2b2075393199c84a3dfee6163ce6e89e746c42b758b0d72fa15e84f7c72d07f4", 0xc5)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:34 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:34 executing program 1:
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:35 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:44:35 executing program 1:
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:35 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4)

16:44:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:35 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:35 executing program 1:
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:35 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:35 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x400000)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x208000000)

16:44:35 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:35 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:36 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r1, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:44:36 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000080))
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/5)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'veth0_to_bridge\x00', 0xffffffff80000001})

16:44:36 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:36 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:36 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:36 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:36 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffff9c})
write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7)
lseek(r0, 0x0, 0x1)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x5, 0x4, 0x2}, &(0x7f0000000080)=0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r3=>0x0)
sched_getaffinity(r3, 0x8, &(0x7f00000001c0))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000100)=0x8)
socket$kcm(0x29, 0x5, 0x0)

16:44:39 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:39 executing program 3:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r0 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:44:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:39 executing program 0:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x40800, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000140)={0x1ff, 0x96, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffff8000})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x7)
unshare(0x201)
syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0xa000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x10})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:44:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:39 executing program 3:
r0 = socket(0x0, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x4800)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:39 executing program 3:
r0 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:42 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:42 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0)
getsockopt(r1, 0x101, 0x0, &(0x7f0000000100)=""/82, &(0x7f0000000080)=0x52)
clone(0x200005, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/5)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0)
ioctl$TIOCCONS(r2, 0x541d)
syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x6, 0x40080)
ioctl$TIOCNXCL(r2, 0x540d)

16:44:42 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:42 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:42 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:42 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:42 executing program 0:
socketpair(0xb, 0x3, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x80000001, 0x8, 0x81, 0x3, 0x3, 0x0, 0x1c8a0000000000, 0x1, 0xab, 0xff, 0x2e}, 0xb)
r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x2008002, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e20, @broadcast}})
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=<r3=>0x0, &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r3, @in={{0x2, 0x4e21, @remote}}, [0x9, 0xfffffffffffffffb, 0x2056d6c3, 0x8, 0xb1d6, 0x9, 0x3, 0x8, 0xe1, 0x4, 0x8, 0x80000001, 0xffffffff80000000, 0x7fff, 0xfffffffffffffffb]}, &(0x7f0000000200)=0x100)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000240)=""/5)

16:44:42 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:42 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x0, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:42 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
sendto$packet(r1, &(0x7f0000000040)="cc34fda29d85863d979c32c223a6ae6c01534c1b7bbb98c65df03b40b8710ff2fca06a1d0f918cc50f09b639746219c424626f006857031c87cfacc57b3aa1e31a682a69fff9a1e2773b5809d77941acc6c4b90c87489db926aa1b217f287548fe548b73682eef97cf8b903e0c668486dda61ed29d0d73cda7ba01eb78a9c462017d4795701a0bb6073dbc2b52a027713b8ebbcc80214eae4c1a5c3b806df11e56fa8d3026441892c7f2b74a2c005b3b0fb2fa1ff5ea912e1f68852fc951", 0xbe, 0x10, &(0x7f0000000180)={0x11, 0x19, r2, 0x1, 0xffffffff, 0x6, @broadcast}, 0x14)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:45 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:45 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:45 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:45 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
lseek(r0, 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0))
r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={<r2=>0x0, 0x6, 0x7fffffff, 0x4, 0xfffffffffffffffe, 0x100000000, 0x9, 0x7, {0x0, @in6={{0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, [], 0x24}, 0x4}}, 0x9, 0x3f, 0x8, 0x5, 0xb6f}}, &(0x7f0000000180)=0xb0)
fstat(r1, &(0x7f0000000280))
fstat(r1, &(0x7f0000000bc0))
socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={<r3=>0x0, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000980)='/dev/snd/controlC#\x00', 0xffffffffffffffff}, 0x30)
waitid(0x1, r3, &(0x7f0000000a00), 0x2, &(0x7f0000000a80))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x74e5, 0x20, 0x100, 0xffffffff}, &(0x7f0000000380)=0x18)
r4 = creat(&(0x7f0000000900)='./file0\x00', 0x4)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000940)={0x1, 0x2, [@link_local, @dev={[], 0x14}]})
recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f0000000780)=""/81, 0x51}], 0x5}, 0x7f}], 0x1, 0x0, &(0x7f00000008c0)={0x77359400})

16:44:45 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:45 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x0, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:45 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x9)
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)
linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1400)

16:44:45 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:45 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:45 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:48 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:48 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={<r1=>0xffffffffffffff9c})
getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x21)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e24, 0xe03, @remote, 0x6}, {0xa, 0x4e23, 0x80, @local, 0x14ac0a18000000}, 0x10000, [0x7, 0x10000, 0x9, 0x1, 0x7, 0x100000001, 0x1, 0x4]}, 0x5c)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:48 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:48 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:48 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:48 executing program 0:
syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x101000)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x183)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x2d, 0x3, 0x0, {0x5, 0xc, 0x0, '/dev/radio#\x00'}}, 0x2d)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(r0, 0x5422)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'eql\x00', 0x800})
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/229)

16:44:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(0xffffffffffffffff, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:51 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

16:44:51 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:44:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:51 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x7a25489c, {{0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0x18}, 0x80000001}}}, 0x88)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/37)

16:44:52 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:52 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:54 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x1000000000016)

16:44:54 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
sync_file_range(r0, 0x7fffffff, 0x80000001, 0x4)

16:44:54 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:54 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:54 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80000000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400)=0x100, r2, 0x0, 0x0, 0x1}}, 0x20)
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={<r4=>0x0, 0x2}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r4, 0xfffffffffffff001}, 0x8)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:55 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:55 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:57 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x1000000000016)

16:44:57 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101, 0x0)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x1e)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/5)

16:44:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:57 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:57 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:44:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:57 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:44:58 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:44:58 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x400, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:44:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:44:58 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x3, 0x7])
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80082, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/231)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/5)

16:45:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:00 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x1000000000016)

16:45:00 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:00 executing program 5:
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:00 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:00 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/5)

16:45:01 executing program 5:
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:01 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r1, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r2, 0x401104000000016)

16:45:01 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:01 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x4000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x1, 0x8, [0x200, 0x130d]})

16:45:01 executing program 5:
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:01 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:03 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:45:03 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:03 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:03 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:03 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:04 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:04 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:04 executing program 0:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000000000000003, 0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000580)={@initdev, <r1=>0x0}, &(0x7f00000005c0)=0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000600)={r1, 0x1, 0x6, @local}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x16c, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x734}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x800)
ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000040)=0x8000)
r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='user.syz\x00')
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000240)=""/5)

16:45:04 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:45:04 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, 0x0, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a0")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:04 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:04 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000000)=""/56)
r1 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x6b2d2af3, 0x80001)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000100)='syz1\x00')
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000180)=0xffffffffffffff74)

16:45:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a0")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:05 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:05 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:05 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, "98fc4b"}, 0x4)
clone(0x1000000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a0")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:05 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

16:45:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:05 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/5)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x101040)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@empty, r3}, 0x14)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8)
getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

16:45:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:06 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:06 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:06 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x14000000})

16:45:06 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8001, 0x0)
accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c)
ioctl$int_in(0xffffffffffffff9c, 0x0, &(0x7f0000000000)=0xb9b)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/5)

16:45:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:06 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x800, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x2, 0x4, 0x7}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x20000804)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x7f, 0xc, [0x3, 0x1000, 0x7]})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000200)=""/37, 0x25}], 0x6)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
socket$pptp(0x18, 0x1, 0x2)

16:45:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:06 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x0)

16:45:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:07 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:07 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

16:45:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:07 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0xffffffffffffdff6, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x800, 0x7, 0xfffffffffffffff9, 0x3, 0x6, 0x2, 0x3b7, 0x38, 0x268, 0x80000001, 0x8, 0x20, 0x2, 0x3, 0x6, 0x7fff}, [{0x0, 0x6, 0x686, 0xcd, 0x80000000, 0x48000000000, 0x5b, 0xff}], "c1dc480e082c2b455b3b3a5501b327dc0c6a30c257e55ceefc36315883a0a33afc8228ddef8927f543c604af3b2af4234f63b6006d711cd52ed99afbfa6b8bf21ee772c41c740e604e34bf407d29ec39c7776a3523912dec184b6893602c32a880fc8e09dcbf1c74e7c19ad4491e3314", [[], []]}, 0x2c8)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:07 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x50440)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x420040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x401, 0x5}, 'port0\x00', 0x51, 0x4, 0xc07, 0x6, 0x501, 0x7, 0x16, 0x0, 0x1, 0x1})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:07 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:07 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:07 executing program 0:
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0xffffffffffffffe5)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x138f, 0x1)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0xc, @pix_mp={0x0, 0x6ce2, 0x32347d59, 0x4, 0x5, [{0x8, 0x400}, {0x2, 0x5}, {0x8, 0x9}, {0x10, 0x1f}, {0xffffffffffff41a1}, {0xb8, 0x1}, {0x200, 0xe53}, {0x2, 0x609a}], 0x6, 0x6, 0x2, 0x0, 0x7}})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001780)=""/5)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/191)
r2 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000380)="6ee55ae8bee533631d9b2ee5a1b56db9aba32382a80d7b8f440c3d5e3d5ee08073880067231b1ac008fb6bedb8a27709aab89c0e21646dc6e1dc17ccf1e8c854f056870d205e1dda56613bb6f80c4188228febcef2a7f8153f28e94d37b981d8ad8c0c1df17a9a07929bfc60d7c3719372e09d7309522e312fefa8735029a4c92fd402505a94e3129977de6c38c55c229c449ee235d842a40c4aa7a0038089d2574c87df0cb2abe7f7547e07b91bc3c14fb8a39786b4fb208d4b56c0c1f28db12e19b3", 0xc3, 0xffffffffffffffff)
r3 = request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='\x00', 0xfffffffffffffffa)
r4 = add_key(&(0x7f0000000500)='trusted\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="0fa008f0b90d5055de1abfacf4721181895bd6286619fae9a604f77e17a7356e576ecb763862575f30d8362cf67a5f9fc391e82f2063250d9d942ad81153175165292bd177afb28cc5cf159a0f9476d85479e6c69bce62db3694", 0x5a, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000600)={r2, r3, r4}, &(0x7f0000000640)=""/4096, 0x1000, &(0x7f0000001740)={&(0x7f0000001640)={'wp256-generic\x00'}, &(0x7f0000001680)="4d30ebdc77b542892eff8d62ca35eed653c345cb0a73a53bf174161677a4a455ea6ff1f81bffe99dd505bf4b5d4219567ce3f0fb8e1b604a3163584d72d1e2857e593602c8de376dded31f2719745662f2e8d76e7b02620ac428b218b816e6877bc11e1072e5153918339de679e7bc8bb8a56dc5612963d6fa85a7144385da23ae2b140a5b775218", 0x88})

16:45:07 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x0)

16:45:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:08 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

[  319.822941] device bridge_slave_1 left promiscuous mode
[  319.828821] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.874777] device bridge_slave_0 left promiscuous mode
[  319.880514] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.017255] device hsr_slave_1 left promiscuous mode
[  320.067071] device hsr_slave_0 left promiscuous mode
16:45:10 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

16:45:10 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/128, 0x23d}], 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x0)

16:45:10 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8000000000000008, 0x2)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4000000003fffffd, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000240)=""/5)

16:45:10 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

[  320.134859] team0 (unregistering): Port device team_slave_1 removed
[  320.203653] team0 (unregistering): Port device team_slave_0 removed
[  320.241829] bond0 (unregistering): Releasing backup interface bond_slave_1
[  320.300038] bond0 (unregistering): Releasing backup interface bond_slave_0
[  320.428567] bond0 (unregistering): Released all slaves
16:45:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000), 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

[  320.820441] IPVS: ftp: loaded support on port[0] = 21
16:45:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000), 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:11 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

[  321.147800] chnl_net:caif_netlink_parms(): no params data found
16:45:11 executing program 4:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x69, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1fffff9, 0x11, r0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

[  321.273197] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.279915] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.290091] device bridge_slave_0 entered promiscuous mode
[  321.302002] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.308634] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.318666] device bridge_slave_1 entered promiscuous mode
16:45:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000), 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

[  321.430230] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  321.445114] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  321.493206] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  321.502931] team0: Port device team_slave_0 added
[  321.511356] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  321.521680] team0: Port device team_slave_1 added
[  321.529505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  321.560711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  321.735760] device hsr_slave_0 entered promiscuous mode
[  321.772735] device hsr_slave_1 entered promiscuous mode
[  321.814886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  321.826149] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  321.881236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  322.000626] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.026436] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  322.058601] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  322.066305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  322.074180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  322.096306] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  322.103234] 8021q: adding VLAN 0 to HW filter on device team0
[  322.129203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  322.137008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  322.145771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  322.153980] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.160431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.217748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  322.253743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  322.267184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.275264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  322.283860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  322.292060] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.298519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.306069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  322.323431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  322.346326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  322.373644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  322.402793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  322.411598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  322.420382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.428820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.437485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.445939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  322.464710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  322.472471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  322.490921] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  322.498407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  322.528021] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  322.543889] 8021q: adding VLAN 0 to HW filter on device batadv0
16:45:13 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:13 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x530)

16:45:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:13 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:13 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

16:45:13 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100, 0x10080)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x2, 0xb8, 0x1ff, 0x2, 0x2})

16:45:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0))
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80)
sysinfo(0x0)

16:45:13 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(0xffffffffffffffff, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:13 executing program 4:
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getrandom(0x0, 0xfffffffffffffeb5, 0x0)
getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0)
r3 = dup2(r1, r2)
modify_ldt$read(0x0, 0x0, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x2, [@rand_addr, @initdev]}, 0x18)
fstat(0xffffffffffffffff, &(0x7f0000000180))
getdents(r3, &(0x7f0000000000)=""/27, 0x1b)

16:45:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
finit_module(r1, 0x0, 0x0)

16:45:16 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local}, @icmp=@timestamp}}}}, 0x0)

16:45:16 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:16 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x9)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000001800000080080000000000000000000020000000080000000800000057a2f84c62cb237b2180f9bdb9018dcf06646987e588b96780ad60510439e3b9d8bf7ceac99c87b11e6dadfc8b67ca6bde53019ad1a6ffb04f799d1b"])
r1 = socket(0x10, 0xa, 0x8885)
setsockopt(r1, 0x400, 0x800, &(0x7f0000000040)="583b543ec4b43260781cd7fd699f467a788ddf5a3f9533e7af367d68959bb91b70e254eaf9b9e6cce352bed42626944622063f7c96c7d77139134cfa440a35bac59aa2af340339d1ab404c", 0x4b)

16:45:16 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:16 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
read(r0, 0x0, 0x7ffffffff000)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000))

16:45:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:45:16 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
accept4$alg(r1, 0x0, 0x0, 0x800)

16:45:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:17 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/203)
clone(0x10000003, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:17 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fcntl$notify(r1, 0x402, 0x1)
dup3(r0, r1, 0x0)

16:45:17 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x10000)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:19 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:19 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x20848000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:19 executing program 1:

16:45:19 executing program 4:

16:45:19 executing program 1:

16:45:19 executing program 4:

16:45:19 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x8200000, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)

16:45:19 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0)

16:45:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:20 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0)
mq_getsetattr(r0, &(0x7f0000000080), 0x0)

16:45:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:22 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x401104000000016)

16:45:22 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x105000)
timerfd_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x101200)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={<r3=>0x0, 0x5, 0x100}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={r3, 0x2, 0x3}, 0x8)

16:45:22 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x4240a3c3)
splice(r0, 0x0, r2, 0x0, 0x10003, 0x0)

16:45:22 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x02\x00', 0x2, [{}, {}]}, 0x48)

16:45:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:22 executing program 4:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
write(r1, &(0x7f00000037c0)="c9", 0x1)
splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0)

16:45:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:23 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)

16:45:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000380)='-!em0:mime_type\x00', 0x0)
r1 = add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="4a33556fe7e2fdd80892f46fd6f139ccf23eebd87f3de1840e7535915099aa05cdbab3c6b5279fa642ee160f2d06d53e", 0x30, 0xfffffffffffffffe)
r2 = add_key(&(0x7f0000000600)='\x90|&x\xcf\x1e\x05\a\xf4\xfe\x83@\x03\xee\xcf\x1f\xc2\'\xfb+\x1fou\xfew\xd8\x9f}\x7f\x14\xa5N_:^\a&>\xef\f\xd5\xe7\xca\xff\xee\x94\x88u\xe4(\xa8\x1a\xa3\xda\xb17\xf0\xce,\x88\xc3QC\xa7\xfc\x0fR\x0e\xcdE\xbb\xcb\xe0}\x17\x9af\xf4T\xd0\xa8\xb0\xe9\xbd*\xac\x02fy\xb9\x9c\xe9\x19\xa9\xc0\xcb\x12yRIe\x96\xfb\xf2\x9e\xc2{\xdd\xbc\t\xec\x9a\xa9\xe2]N\xed\xe8k\xf7\x82\x97}\x85\xe0 Js\x16!\x17\xca\xd3\\h_\x16\xeb\x06\xaa\xf9T\x80\x06\x03\fG\x94\xd7\xb05}\x7f\xfd\xfd\x1c\x99\x8d\xab\x82\xbd\xb8\x13\x04s\xf4\xfb\x10\x1f\xf5\xcb\xefB\x0f\x86g\xb8C\x8eY\x0f\\\x9f\\\x87\xda\xe5L\xeaZI\xa4\xcbx\x1c\x00i\x17my', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000004c0)="bd49f241557c578f31f6e61e67e79a5108e8fc66724b92ab8df41b3547a182504707e240286206e7aa12540f06c62299166e5bdceb4cbcbc8eff4ae931ef23f9f614ccffb805297cd6a9e4152addeb54768eb6aba335c29ba626d8d360a948836dd2df022cbd26f81be564697dcbf917e9aecb8ca6db1deaa07cb7c9da354670c8b36d686ac41a6f38e2915b6c04fc339af469ccf7cf294b4c06e4bf03a5d8d68c94dff229c74d4e3d770d7f0c4bc86fe9a8cae0a1930219e621a59eb4409b4cca5ac229673ecb52e07384dc8e4a0724b805e2e47c72b9982e043808be7429c7dbc7b23eb8bc236c2a7071205a418de731e0790d", 0xf4, r1)
keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/242, 0xf2)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
prctl$PR_GET_SECCOMP(0x15)
keyctl$setperm(0x5, r2, 0x200000)

16:45:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:23 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x1, 0x8000)

16:45:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000380))

16:45:25 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x401104000000016)

16:45:25 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008005, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
recvfrom(r0, &(0x7f0000000180)=""/101, 0xfffffe9b, 0x0, 0x0, 0xffffffffffffffa1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)

16:45:25 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0)
bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0xffff, 0x80fb, 0xd5, 0x8, 0xfffffffffffffff8, 0x1ff}, 0x4}, 0xa)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000000000000002, 0x0)
getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/5)

16:45:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

16:45:26 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup2(r0, r1)

16:45:26 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000240)=""/5)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000000)=0x2, 0xf486, 0x2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
clock_gettime(0x0, &(0x7f00000001c0)={<r8=>0x0, <r9=>0x0})
write$evdev(r1, &(0x7f0000000280)=[{{r2, r3/1000+10000}, 0x11, 0x0, 0x3ff}, {{0x0, 0x2710}, 0x3, 0x4, 0x10000}, {{0x77359400}, 0x0, 0x81, 0x7ff}, {{r4, r5/1000+30000}, 0x4, 0x44, 0x1}, {{r6, r7/1000+10000}, 0x3, 0x1, 0x5}, {{}, 0x14, 0xca, 0x8}, {{0x77359400}, 0x11, 0xfffffffffffffffd, 0x7ff}, {{r8, r9/1000+30000}, 0x15, 0x800, 0x5}], 0xc0)
r10 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1000, 0x800)
write$eventfd(r10, &(0x7f0000000080)=0x3, 0x8)

16:45:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:26 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
unshare(0x600)
pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0)

16:45:26 executing program 4:

16:45:28 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x401104000000016)

16:45:28 executing program 4:

16:45:28 executing program 1:

16:45:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:28 executing program 0:

16:45:29 executing program 4:

16:45:29 executing program 0:

16:45:29 executing program 1:

16:45:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:29 executing program 4:

16:45:29 executing program 1:

16:45:31 executing program 4:

16:45:31 executing program 5:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:31 executing program 0:

16:45:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:31 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x401104000000016)

16:45:31 executing program 1:

16:45:32 executing program 4:

16:45:32 executing program 5:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:32 executing program 1:

16:45:32 executing program 0:

16:45:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:32 executing program 4:

16:45:32 executing program 0:

16:45:35 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(0x0, 0x401104000000016)

16:45:35 executing program 5:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x3f000000})

16:45:35 executing program 1:

16:45:35 executing program 0:

16:45:35 executing program 4:

16:45:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

16:45:35 executing program 4:

16:45:35 executing program 1:

16:45:35 executing program 0:

16:45:35 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

16:45:35 executing program 0:

16:45:35 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
bind(r0, 0x0, 0x0)
close(r0)

16:45:36 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

16:45:36 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
dup3(r2, r0, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x0)

16:45:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x6c, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0)

16:45:36 executing program 0:
r0 = open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = dup(r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x6, 0x4)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c9365b3a0754995b3b4445dfa8ba4768fe6b0fcb352077a4f5181a5d8af754000f67b9ca23100000000e71243bbba053a41f40000000000000000000000"], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = fcntl$dupfd(r3, 0x10000000000000, r2)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment={0x3f, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8)
mkdirat(0xffffffffffffffff, 0x0, 0x20)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x2)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VT_RELDISP(r4, 0x5605)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x800000000000)
memfd_create(&(0x7f00000004c0)='\x00', 0x1)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x32, r5, 0x0)
ftruncate(r5, 0x7fff)
sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe)

16:45:36 executing program 4:
r0 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa80, 0x4)
sendfile(r0, r1, 0x0, 0x100000001)

16:45:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40012122, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b03742e8d72b8fd0700548b68f71e63c1a897d7d8bf1b0eda9cb7faa0a8a6a3e320533d3f124c7707011eeb908d7895a67cc838a295b4687497c5556fa825b"}, 0x80)

[  346.037991] Started in network mode
[  346.041967] Own node identity fe8000000000000000000000000000bb, cluster identity 4711
[  346.050093] ==================================================================
[  346.057469] BUG: KMSAN: uninit-value in __inet6_bind+0xb3a/0x1a30
[  346.063714] CPU: 0 PID: 12559 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1
[  346.070920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.080274] Call Trace:
[  346.082896]  dump_stack+0x173/0x1d0
[  346.086539]  kmsan_report+0x12e/0x2a0
[  346.090354]  __msan_warning+0x82/0xf0
[  346.094176]  __inet6_bind+0xb3a/0x1a30
[  346.098096]  inet6_bind+0x206/0x300
[  346.101745]  ? ipv6_mod_enabled+0x60/0x60
[  346.105907]  kernel_bind+0xc6/0xf0
[  346.109463]  udp_sock_create6+0x2ee/0x890
[  346.113645]  tipc_udp_enable+0x1654/0x1d50
[  346.117940]  ? tipc_udp_send_msg+0x7d0/0x7d0
[  346.122362]  __tipc_nl_bearer_enable+0x121b/0x1d90
[  346.127329]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  346.132703]  ? mutex_lock+0x91/0x100
[  346.136434]  tipc_nl_bearer_enable+0x6c/0xb0
[  346.140865]  ? __tipc_nl_bearer_enable+0x1d90/0x1d90
[  346.145984]  genl_rcv_msg+0x185f/0x1a60
[  346.149993]  ? __msan_poison_alloca+0x1f0/0x2a0
[  346.154688]  netlink_rcv_skb+0x444/0x640
[  346.158761]  ? genl_unbind+0x390/0x390
[  346.162759]  genl_rcv+0x63/0x80
[  346.166051]  netlink_unicast+0xf40/0x1020
[  346.170232]  netlink_sendmsg+0x127f/0x1300
[  346.174515]  ___sys_sendmsg+0xdb9/0x11b0
[  346.178607]  ? netlink_getsockopt+0x1460/0x1460
[  346.183300]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
16:45:36 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)

[  346.188690]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  346.194077]  ? __fget_light+0x6e1/0x750
[  346.198090]  __se_sys_sendmsg+0x305/0x460
[  346.202275]  __x64_sys_sendmsg+0x4a/0x70
[  346.206350]  do_syscall_64+0xbc/0xf0
[  346.210087]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  346.215282] RIP: 0033:0x457ec9
[  346.218483] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  346.225692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  346.237387] RSP: 002b:00007f407bed6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.237405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9
[  346.237416] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003
[  346.237427] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  346.237436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f407bed76d4
[  346.237446] R13: 00000000004c4f84 R14: 00000000004d86a0 R15: 00000000ffffffff
[  346.237467] 
[  346.237475] Local variable description: ----udp6_addr@udp_sock_create6
[  346.237498] Disabling lock debugging due to kernel taint
[  346.312770] Kernel panic - not syncing: panic_on_warn set ...
[  346.318669] CPU: 0 PID: 12559 Comm: syz-executor1 Tainted: G    B             4.20.0-rc7+ #1
[  346.327247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.336608] Call Trace:
[  346.339213]  dump_stack+0x173/0x1d0
[  346.342858]  panic+0x3ce/0x961
[  346.346095]  kmsan_report+0x293/0x2a0
[  346.349918]  __msan_warning+0x82/0xf0
[  346.353736]  __inet6_bind+0xb3a/0x1a30
[  346.357685]  inet6_bind+0x206/0x300
[  346.361330]  ? ipv6_mod_enabled+0x60/0x60
[  346.365489]  kernel_bind+0xc6/0xf0
[  346.369058]  udp_sock_create6+0x2ee/0x890
[  346.373243]  tipc_udp_enable+0x1654/0x1d50
[  346.377539]  ? tipc_udp_send_msg+0x7d0/0x7d0
[  346.381955]  __tipc_nl_bearer_enable+0x121b/0x1d90
[  346.386924]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  346.392298]  ? mutex_lock+0x91/0x100
[  346.396028]  tipc_nl_bearer_enable+0x6c/0xb0
[  346.400454]  ? __tipc_nl_bearer_enable+0x1d90/0x1d90
[  346.405566]  genl_rcv_msg+0x185f/0x1a60
[  346.409582]  ? __msan_poison_alloca+0x1f0/0x2a0
[  346.414277]  netlink_rcv_skb+0x444/0x640
[  346.418348]  ? genl_unbind+0x390/0x390
[  346.422256]  genl_rcv+0x63/0x80
[  346.425550]  netlink_unicast+0xf40/0x1020
[  346.429730]  netlink_sendmsg+0x127f/0x1300
[  346.434000]  ___sys_sendmsg+0xdb9/0x11b0
[  346.438076]  ? netlink_getsockopt+0x1460/0x1460
[  346.442780]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  346.448162]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  346.453534]  ? __fget_light+0x6e1/0x750
[  346.457542]  __se_sys_sendmsg+0x305/0x460
[  346.461722]  __x64_sys_sendmsg+0x4a/0x70
[  346.465794]  do_syscall_64+0xbc/0xf0
[  346.469523]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  346.474718] RIP: 0033:0x457ec9
16:45:36 executing program 4:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c)

[  346.477921] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  346.496826] RSP: 002b:00007f407bed6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.504544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9
[  346.511815] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003
[  346.519084] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  346.526358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f407bed76d4
[  346.533632] R13: 00000000004c4f84 R14: 00000000004d86a0 R15: 00000000ffffffff
[  346.542078] Kernel Offset: disabled
[  346.545702] Rebooting in 86400 seconds..