l$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aab4ac87b0009bfe91773b030000004b754743dd8b11a336cc3822d86fbdaf80b2463b5f31d2b54f339af5ad6d3bbcaa25100b11be4def5f60eec52304f5ab97ab6b6284a3edf1613ffd40ccccc7465041390d71c6024a7707d4dfe6a09920957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c6245267f81008ae6602909ef0fe50c4"]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x100000000000000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') lseek(r4, 0x100000000000000, 0x0) 18:16:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:16:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f00000001c0)={0x0, 0x2, "f520"}, &(0x7f0000000280)=0xa) 18:16:59 executing program 4: socket$inet6_tcp(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0) 18:16:59 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) unshare(0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) unshare(0x4000000) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:16:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_open_pts(r3, 0x0) (async) dup3(r5, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:16:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:16:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) close(r0) 18:16:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000140)=""/34, 0x22}], 0x1) 18:16:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x0, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:16:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x4f, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) close(r6) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000000)) 18:16:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, &(0x7f0000000080)) 18:17:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 18:17:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x4f, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) close(r6) (async) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000000)) 18:17:00 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aab4ac87b0009bfe91773b030000004b754743dd8b11a336cc3822d86fbdaf80b2463b5f31d2b54f339af5ad6d3bbcaa25100b11be4def5f60eec52304f5ab97ab6b6284a3edf1613ffd40ccccc7465041390d71c6024a7707d4dfe6a09920957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c6245267f81008ae6602909ef0fe50c4"]) (async, rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x4) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x100000000000000, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') (rerun: 32) lseek(r4, 0x100000000000000, 0x0) 18:17:00 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) unshare(0x28000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x0, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:00 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20482, 0x0) 18:17:00 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) unshare(0x28000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) unshare(0x28000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x4f, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) close(r6) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x4f, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}}, 0x0) (async) close(r6) (async) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000000)) (async) 18:17:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x8000, &(0x7f0000000000), 0x4) 18:17:01 executing program 4: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) 18:17:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:01 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000140)='^', 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x24, 0x0, 0x0) 18:17:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000140)) r9 = dup(r6) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x400, 0x81}}, './file0\x00'}) 18:17:01 executing program 4: getgroups(0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]) setresgid(0x0, 0x0, r0) 18:17:01 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="64b016285fe03b5462225e63e9aab4ac87b0009bfe91773b030000004b754743dd8b11a336cc3822d86fbdaf80b2463b5f31d2b54f339af5ad6d3bbcaa25100b11be4def5f60eec52304f5ab97ab6b6284a3edf1613ffd40ccccc7465041390d71c6024a7707d4dfe6a09920957750120a71c4e6d9d6ef29a9835742f2218616ff19dee2300dc778d78cc3ea1eeb9a992c88c6245267f81008ae6602909ef0fe50c4"]) (async, rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') (async, rerun: 32) lseek(0xffffffffffffffff, 0x100000000000000, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') lseek(r4, 0x100000000000000, 0x0) 18:17:01 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) unshare(0x28000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) unshare(0x28000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:01 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x100000000}) 18:17:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) (rerun: 64) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000140)) r9 = dup(r6) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x400, 0x81}}, './file0\x00'}) 18:17:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 18:17:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0}, 0x0) 18:17:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:02 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000080)) 18:17:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000140)) r9 = dup(r6) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x400, 0x81}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r7) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000140)) (async) dup(r6) (async) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x400, 0x81}}, './file0\x00'}) (async) 18:17:03 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x0, 0x4}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fchdir(r3) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:17:03 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x3cd103) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:03 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7fff, 0x4) 18:17:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x20, 0x4) 18:17:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000000)={0x6, 0x4}) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:03 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x3cd103) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) connect$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000018c0)={r6}, 0x14) 18:17:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:17:03 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x0, 0x4}}, 0x14) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fchdir(r3) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000002c0)={@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0xc) 18:17:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 18:17:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:17:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001740)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x348}, 0x184) 18:17:04 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cubic\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cubic\x00', 0x8) 18:17:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000000)={0x6, 0x4}) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000000)={0x6, 0x4}) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) [ 624.032439][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.039995][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 18:17:04 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000780)=0x88) 18:17:04 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x3cd103) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:04 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x2000, &(0x7f0000000040)="441102f29f16983743b5e38e040a8fbe36655dc3ea39545665fb93d5337fc986dcbb2fab", 0x24) 18:17:04 executing program 5: unshare(0x40000000) (async, rerun: 64) unshare(0x18000e00) (async, rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) r2 = dup(r1) (rerun: 32) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x0, 0x4}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fchdir(r3) (async, rerun: 64) r4 = dup(r3) (rerun: 64) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x0, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:17:05 executing program 0: ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x3f, &(0x7f0000000080)="2fcbf5381a05618af83748f4d4f3c8905c21fef94ef43aed8d68bd2a9ababe71bc564538e8dce4877aab714e48406341b678273b085d187c663df77a368d0f"}) unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000000)={0x6, 0x4}) (async) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="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", 0xff1}], 0x1}, 0x0) 18:17:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82}, 0x0) 18:17:05 executing program 4: rename(&(0x7f0000000080)='./file0\x00', 0x0) [ 624.715891][T20690] ptm ptm4: ldisc open failed (-12), clearing slot 4 18:17:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='F', 0x1}, {0x0}, {&(0x7f0000000140)="ba", 0xfffffffffffffffd}], 0x3, 0x0, 0x0, 0x1}, 0x4) 18:17:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0}, 0x0) 18:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:05 executing program 0: ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x3f, &(0x7f0000000080)="2fcbf5381a05618af83748f4d4f3c8905c21fef94ef43aed8d68bd2a9ababe71bc564538e8dce4877aab714e48406341b678273b085d187c663df77a368d0f"}) (async) unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:06 executing program 5: unshare(0x40000000) unshare(0x4000000) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x16) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x10002) pidfd_getfd(r2, r3, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 18:17:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x0, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82}, 0x0) 18:17:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:06 executing program 0: ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x3f, &(0x7f0000000080)="2fcbf5381a05618af83748f4d4f3c8905c21fef94ef43aed8d68bd2a9ababe71bc564538e8dce4877aab714e48406341b678273b085d187c663df77a368d0f"}) unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x3f, &(0x7f0000000080)="2fcbf5381a05618af83748f4d4f3c8905c21fef94ef43aed8d68bd2a9ababe71bc564538e8dce4877aab714e48406341b678273b085d187c663df77a368d0f"}) (async) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000580), 0x8) 18:17:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x284, &(0x7f0000000040)=@abs={0x8}, 0x8) 18:17:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:06 executing program 4: socket$inet6_tcp(0x1c, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000080)={0x9}, 0x0, 0x0) 18:17:07 executing program 5: unshare(0x40000000) unshare(0x4000000) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x16) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x10002) pidfd_getfd(r2, r3, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x4000000) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x16) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x10002) (async) pidfd_getfd(r2, r3, 0x0) (async) dup(0xffffffffffffffff) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000100)={0x0, 0x2}, 0x8) [ 626.495877][T20769] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:17:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x61c2c9d9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sched_getparam(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82}, 0x0) 18:17:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x1, 0x0, 0x0) 18:17:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x0, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:07 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @generic={0x8e, 0x6, 0x4, 0x0, 0xfff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff52}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) 18:17:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f0000000180)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 18:17:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, "004009401d113c81fcf7600000002100"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="460f001265676766400f00980000010067c342dfc566baf80cb8305ae18bef66bafc0cb859610000efb805000000b9b45e38ce0f01c1c74424000e000000c7442402bd0a0000c7442406000000000f011c242e0fae19f20f12710064f044013e", 0x60}], 0x1, 0x0, 0x0, 0x0) r9 = fcntl$dupfd(r2, 0x406, r3) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x8000000000000001}) 18:17:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x88) 18:17:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000080)={@multicast1}, 0xc) 18:17:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x84, 0x0, 0x6}, 0x98) 18:17:08 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) close(r0) pipe2(&(0x7f0000000080), 0x0) 18:17:08 executing program 5: unshare(0x40000000) (async) unshare(0x4000000) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)=0x16) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x10002) pidfd_getfd(r2, r3, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:08 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @generic={0x8e, 0x6, 0x4, 0x0, 0xfff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff52}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @generic={0x8e, 0x6, 0x4, 0x0, 0xfff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff52}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) (async) 18:17:08 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x2, 0x1, 0x0) dup2(r1, r0) 18:17:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x1, &(0x7f0000000000)={@broadcast}, 0xc) 18:17:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:08 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000001040)=0x1002) 18:17:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="4c81038eb12360038ed202c45428df38e1065758f33e329bbfbe6e8cb40d23b2b296ea67bcd95211c3190a0e7e3babc3e773266e1db620907fed073e28325b62ad4b1d21d1a4d21bf03fc9d4b94569b43093efc0805fcba1d348d2623bc21f025e4e25428a26e5f4c28832a38edbb4ebba6274e8b845d7f434b21678fc3f6bbbd9bdb3dc04ba73eddbf26134214c2a7da87a80e532e53e4ae6c402f8d6c6a3eadf7cc6a55ee18fcbc4ef2f53f74366593263e8e313d7f0312fa2c09a8a2ef1c3a6328ac3f257706c5fa5968389d23e8f179ea71178d8", 0xd6}, {&(0x7f0000000240)="25feffdd4b4909e0fab0cc1f8b9ae67a05b1146ada7649a467e4b1f621e70d71e15cba99f3b056c76190de594f95e1cf65158b21442680e44fff8d38311c2ef9be2e2bfd2471c63484ff589f5338b407f445d3bd69c61bd7908fb7bc2b3bae6f65e593f089bc851470c552f82177f876ff10c357b2339e3033902bd7fc7342c580cb5329c80b6687af665ee7e61787e1490558cd040dd1d44985ec3d30e8d5e7d07e00155954ffcea41132cfbc2627800716d001b564dd13", 0xb8}, {&(0x7f0000000300)="044466213a7701a3885dd7bd680c9a7c5940030e", 0x14}, {&(0x7f0000000580)="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", 0xf3f}], 0x4}, 0x0) 18:17:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, "004009401d113c81fcf7600000002100"}) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) (rerun: 32) dup3(r3, r2, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="460f001265676766400f00980000010067c342dfc566baf80cb8305ae18bef66bafc0cb859610000efb805000000b9b45e38ce0f01c1c74424000e000000c7442402bd0a0000c7442406000000000f011c242e0fae19f20f12710064f044013e", 0x60}], 0x1, 0x0, 0x0, 0x0) r9 = fcntl$dupfd(r2, 0x406, r3) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x8000000000000001}) 18:17:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='F', 0x1}], 0x1}, 0x0) 18:17:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, 0x0) 18:17:08 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) 18:17:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="5757766d73c9e803ef9caf09f80d48e53182f12491fe528d93ded7b760704d0e5f1ff1e1b05df738d738259f6880b084a5c3551c242110855f0d90f6fa2898775e1c22ba0e2adb3bc2eba4943ad18624106d3685a0298b72a3da676166d643e1ebc181ede09007c321d102c0bff482721043bb92f5ee4607c343bec4226f475976769748ad0fae9d3ed62d30a11fd1430da27d1e2cea0b5d7b2fab0b01b2279780b9953eb0d9830056ada177bf190fa387a7332711c30d655c7786ef52a159e334bc2de0e277968ece9b5db43553d1241dcab4165df793307bbab1813b16169b", 0xe0) [ 628.477409][T20877] ptm ptm2: ldisc open failed (-12), clearing slot 2 18:17:09 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @generic={0x8e, 0x6, 0x4, 0x0, 0xfff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff52}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @generic={0x8e, 0x6, 0x4, 0x0, 0xfff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff52}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) (async) 18:17:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0xaa1957e1058b364e}], 0x1, 0x0, 0x0, 0x0) 18:17:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) 18:17:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, "004009401d113c81fcf7600000002100"}) (async) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="460f001265676766400f00980000010067c342dfc566baf80cb8305ae18bef66bafc0cb859610000efb805000000b9b45e38ce0f01c1c74424000e000000c7442402bd0a0000c7442406000000000f011c242e0fae19f20f12710064f044013e", 0x60}], 0x1, 0x0, 0x0, 0x0) (async) r9 = fcntl$dupfd(r2, 0x406, r3) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x8000000000000001}) 18:17:09 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/121) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 18:17:09 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000100)={@empty}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@loopback}, 0x14) 18:17:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) 18:17:10 executing program 5: unshare(0x40000000) (async, rerun: 32) unshare(0x18000e00) (rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/121) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01f390926d5dc04e91000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KDSKBLED(r4, 0x4b65, 0x0) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="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", 0x14a}, {&(0x7f0000000180)="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", 0xeb7}], 0x2}, 0x0) 18:17:11 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5a01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=""/253) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:11 executing program 1: ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 18:17:11 executing program 4: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 18:17:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01f390926d5dc04e91000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$KDSKBLED(r4, 0x4b65, 0x0) (async) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:11 executing program 5: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/121) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:11 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) inotify_init1(0x80000) 18:17:11 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='&\'+{[[$\'\'(@\x00', &(0x7f0000000080)='./file0\x00', r1) 18:17:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01f390926d5dc04e91000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KDSKBLED(r4, 0x4b65, 0x0) r5 = syz_open_pts(r3, 0x0) r6 = dup3(r5, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="01f390926d5dc04e91000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$KDSKBLED(r4, 0x4b65, 0x0) (async) syz_open_pts(r3, 0x0) (async) dup3(r5, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:11 executing program 4: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2a, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)) 18:17:11 executing program 4: io_setup(0x400, &(0x7f0000000780)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x4]}, 0x8}) 18:17:11 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5a01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=""/253) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:11 executing program 4: linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1800) 18:17:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xb0}}, 0x0) 18:17:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 18:17:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:11 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async, rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5a01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=""/253) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (rerun: 32) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:11 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 18:17:11 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x5}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x9, 0xffffffff, 0x8, 0x1, 0x6, 0xee33, 0x5, 0x9}, 0x18, [0x0, 0x0, 0x0]}) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0xff, 0x9, 0x401}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x8000) io_uring_setup(0x59c5, &(0x7f0000000300)={0x0, 0xaa46, 0x0, 0x1, 0xd4}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ac5f6d49", {0x3, 0x107, 0x0, 0x2, 0x916, 0x2, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x2004c0c0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@newtclass={0x2c, 0x28, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xffff}, {0x2, 0x8}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000740)={{r0, 0x380, 0x0, 0x6, 0x4, 0x7, 0xe591, 0xef, 0x0, 0x5, 0x10001, 0x3, 0x7, 0x3ff, 0x20}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/asound/seq/timer\x00', 0x0, 0x0) 18:17:12 executing program 4: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1400) 18:17:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$capi20_data(r0, 0x0, 0x12) 18:17:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:12 executing program 4: socket$inet(0x2, 0x0, 0x10000) 18:17:12 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (rerun: 32) 18:17:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:12 executing program 4: syz_io_uring_setup(0x6670, &(0x7f0000000100)={0x0, 0x0, 0x20}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:17:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:12 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x503000, 0x0) 18:17:12 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 18:17:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000380)='1', 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20088480}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x190, 0x31, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88e}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 18:17:12 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:12 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/153) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:12 executing program 4: syz_clone(0x40000000, &(0x7f0000000000)="9188196e3387cb7df1b4", 0xa, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="23ad11bd819bc43657875b0ffc60") 18:17:12 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 18:17:13 executing program 1: pipe2$9p(0x0, 0xa719fcea94fc02c4) 18:17:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000380)='1', 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20088480}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x190, 0x31, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88e}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000380)='1', 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20088480}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x190, 0x31, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88e}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (async) 18:17:13 executing program 4: syz_io_uring_setup(0x35d6, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 18:17:13 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000007080), 0x1, 0x0) 18:17:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:13 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) 18:17:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0xec1}}, 0x0) 18:17:13 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/153) (async, rerun: 32) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000380)='1', 0x1) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20088480}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x190, 0x31, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88e}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 18:17:13 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) unshare(0x18020640) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x29a) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 18:17:13 executing program 1: timer_create(0x0, 0x0, &(0x7f0000001600)) timer_create(0x0, 0x0, &(0x7f0000002840)) 18:17:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1}) 18:17:13 executing program 1: syz_io_uring_setup(0x77e1, &(0x7f0000000340)={0x0, 0x0, 0x6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 18:17:13 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18:17:13 executing program 1: timer_create(0x0, &(0x7f00000015c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001600)) 18:17:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) 18:17:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0x0, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) 18:17:14 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 18:17:14 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/153) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/153) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:14 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) unshare(0x18020640) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4601080708050000000000000003000300010000002600000000000000400000000000000068020000000000000500000002003800020009001f00ff0f070000000000000002000000000000000500000000000000010000000000000002000000000000000600000000000000020000000000000000000000000000009b00000000000000008000000000000007000000000000009800000000000000020000000000000081000000000000007320135472a128b25bd7675b29bc573ba4e443f14333ce2486f2d716abeb9df68656c3f80463e862fb5e8e9954e4cf674e98440e285c8a6dc387133e6202e1d988ec664c75f75d62496ad8cb1e8cb2335ed8a83ffb73504f397dae5933927217ca7f1a83f9c820e73bd744d895e2e8eb4eb313850c48d1e7217c3586dc9ee98fb2dc0f91a757d87f7811de3ede0c09623f702d4a834cab98258c4f13fbc0a81975943cb07b66ca9fe38fcc686b7f2bf9cdd8a89f6b7edeee9c0336efd5a9b4f4494f0c9de8c3c72f32394cec9012eb7131bcebf2f482485d78b8ebfa23580338519668f5e32743e455780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046ffd857ffc10c9485ac5fcc31b4afd2a0ea3356731d23362c191137db2e1f4cf577941d29711341155dea7ab456e09f5d81577029c9ff29caf0e8c4acf885fae824d64869bcd44d39adc2439d0c7891f7700ed32b4ca6d0fca9c1e65a8d2523c274ea502b68bcfa154a11218da5628cf0b0c568ca33898b5a8dae8f86eb5cc0a037397bd78276bef731ac57e559e2a63bbd374d338b791fcbe497baf2cd713f22934c1506bc674787a88592c8fba98b7550b252cd3df923a395d433bd7e825fee947bccc2a546f9ba66ca4f6704dd369953f894a07291"], 0x29a) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) unshare(0x18020640) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x29a) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) 18:17:14 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f0000000300)={'gre0\x00', 0x0}) 18:17:14 executing program 1: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0xc0000000000000}, &(0x7f0000000380)={0x0, r0/1000+60000}) 18:17:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) (async) syz_open_pts(r3, 0x0) (async) dup3(r5, r3, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) 18:17:14 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mlock(&(0x7f0000332000/0x3000)=nil, 0x3000) mlock(&(0x7f0000462000/0x4000)=nil, 0x4000) 18:17:14 executing program 1: syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x97, {0x7}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000c80)={0xa}, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 18:17:15 executing program 4: timer_create(0x7db60b5cf45b300d, 0x0, &(0x7f0000000200)) 18:17:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) [ 634.717694][ T9166] usb 2-1: new high-speed USB device number 33 using dummy_hcd 18:17:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0x0, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:15 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001600)) timer_create(0x0, &(0x7f0000002800)={0x0, 0x0, 0x4, @thr={&(0x7f0000001700), 0x0}}, 0x0) 18:17:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x2968}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 634.987421][ T9166] usb 2-1: Using ep0 maxpacket: 32 [ 635.127647][ T9166] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.166847][ T9166] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.197073][ T9166] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 18:17:15 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x24140, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x40, 0x7000000}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x100002, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}, 0x300}, 0x0) 18:17:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x2968}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:15 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) unshare(0x18020640) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x29a) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 18:17:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0xfffffdef}}, 0x0) [ 635.397747][ T9166] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.406884][ T9166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.477295][ T9166] usb 2-1: Product: syz 18:17:16 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1123, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x93, 0x1, 0x3, 0x1, 0x1, 0x3f, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xcc5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x2b}}]}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x28, &(0x7f0000000100)=@string={0x28, 0x3, "31b13d754f50434c127450b1c6f6295071e3acbe75d8f9de58380bb483bb59b8fd4b5592c601"}}]}) [ 635.502479][ T9166] usb 2-1: Manufacturer: syz [ 635.533241][ T9166] usb 2-1: SerialNumber: syz [ 635.899689][ T9166] usb 2-1: 0:2 : does not exist [ 635.905358][ T8990] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 635.928249][ T9166] usb 2-1: USB disconnect, device number 33 [ 635.958773][T14216] udevd[14216]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.167432][ T8990] usb 5-1: Using ep0 maxpacket: 16 18:17:16 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x24140, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x40, 0x7000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x100002, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x2968}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x8, 0x2968}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0x0, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:16 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xafb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "4e67b4976d75907df5c976e9ad1749055b69860e3a1af19aa8f1acbd4880b803aa86243a537d30ac317e07cb87bcb0f2a37759296416730916d6ef5828e77f9fb7588aa3ac42e6a8a90a51d6a410382c9df3a833be9941152e4f97f1bdbe783db604175f412f8cb91eba80d210c26cce82cefffe97d1cdae387735151202864024553e06685c3189a57d33e4948c502660a206794b850c4120b9a59a21ded2e105574b157cbf34f127b56319c2bbf6128c5e2ee679947abad88c98"}, 0xbf) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) 18:17:16 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 636.307532][ T8990] usb 5-1: config 1 interface 0 altsetting 147 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.319945][ T8990] usb 5-1: config 1 interface 0 altsetting 147 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.338527][ T8990] usb 5-1: config 1 interface 0 has no altsetting 0 18:17:17 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000007580)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 636.517337][ T8990] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 636.531007][ T8990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.555454][ T8990] usb 5-1: Product: syz 18:17:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) [ 636.618097][ T8990] usb 5-1: Manufacturer: 넱甽偏䱃琒념倩뺬𭛹㡘됋뮃롙䯽鉕dž [ 636.653939][ T8990] usb 5-1: SerialNumber: syz 18:17:17 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x24140, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x40, 0x7000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x100002, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) fsetxattr(r6, &(0x7f0000000000)=@random={'user.', '/dev/ptmx\x00'}, &(0x7f0000000040)='\\(\x00', 0x3, 0x3) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x7, 0x4, 0x1ff, 0x7e529936, 0x3, "6fd79f167b9df0769c9ea611d6f504aea989c0"}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb8c8d7918eef66bafc0ced66baf80cb816462984ef66bafc0c66ed0f79c30f20d835200000000f22d8831cf000c4c14573fe6bf30fc73432c4c135efe90fe359d3b9800000c00f3235004000000f30", 0x53}], 0x1, 0x20, 0x0, 0x0) 18:17:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) [ 637.187429][ T8990] usbhid 5-1:1.0: can't add hid device: -71 [ 637.194594][ T8990] usbhid: probe of 5-1:1.0 failed with error -71 [ 637.232281][ T8990] usb 5-1: USB disconnect, device number 38 18:17:18 executing program 4: syz_open_dev$vcsa(&(0x7f0000007640), 0x0, 0xa0802) 18:17:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) fsetxattr(r6, &(0x7f0000000000)=@random={'user.', '/dev/ptmx\x00'}, &(0x7f0000000040)='\\(\x00', 0x3, 0x3) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x7, 0x4, 0x1ff, 0x7e529936, 0x3, "6fd79f167b9df0769c9ea611d6f504aea989c0"}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb8c8d7918eef66bafc0ced66baf80cb816462984ef66bafc0c66ed0f79c30f20d835200000000f22d8831cf000c4c14573fe6bf30fc73432c4c135efe90fe359d3b9800000c00f3235004000000f30", 0x53}], 0x1, 0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) socket(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) (async) fsetxattr(r6, &(0x7f0000000000)=@random={'user.', '/dev/ptmx\x00'}, &(0x7f0000000040)='\\(\x00', 0x3, 0x3) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x7, 0x4, 0x1ff, 0x7e529936, 0x3, "6fd79f167b9df0769c9ea611d6f504aea989c0"}) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb8c8d7918eef66bafc0ced66baf80cb816462984ef66bafc0c66ed0f79c30f20d835200000000f22d8831cf000c4c14573fe6bf30fc73432c4c135efe90fe359d3b9800000c00f3235004000000f30", 0x53}], 0x1, 0x20, 0x0, 0x0) (async) 18:17:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:19 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xafb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "4e67b4976d75907df5c976e9ad1749055b69860e3a1af19aa8f1acbd4880b803aa86243a537d30ac317e07cb87bcb0f2a37759296416730916d6ef5828e77f9fb7588aa3ac42e6a8a90a51d6a410382c9df3a833be9941152e4f97f1bdbe783db604175f412f8cb91eba80d210c26cce82cefffe97d1cdae387735151202864024553e06685c3189a57d33e4948c502660a206794b850c4120b9a59a21ded2e105574b157cbf34f127b56319c2bbf6128c5e2ee679947abad88c98"}, 0xbf) (async) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) 18:17:19 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:19 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1123, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x93, 0x1, 0x3, 0x1, 0x1, 0x3f, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xcc5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6d, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x397, 0x0, 0x2b}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x0, 0x0, 0xff, 0x5}, 0x21, &(0x7f0000000080)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0x0, 0x0, [0x30, 0xc0, 0xc00f, 0xff00f0]}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x34, &(0x7f0000000100)=@string={0x34, 0x3, "31b13d754f50434c127450b1c6f6295071e3acbe75d8f9de58380bb483bb59b8fd4b5592c60130ff9764c439c29aeacb8d5b"}}]}) 18:17:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) (async) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) (async) fsetxattr(r6, &(0x7f0000000000)=@random={'user.', '/dev/ptmx\x00'}, &(0x7f0000000040)='\\(\x00', 0x3, 0x3) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x7, 0x4, 0x1ff, 0x7e529936, 0x3, "6fd79f167b9df0769c9ea611d6f504aea989c0"}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb8c8d7918eef66bafc0ced66baf80cb816462984ef66bafc0c66ed0f79c30f20d835200000000f22d8831cf000c4c14573fe6bf30fc73432c4c135efe90fe359d3b9800000c00f3235004000000f30", 0x53}], 0x1, 0x20, 0x0, 0x0) 18:17:19 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)) r4 = dup(r3) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:20 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:20 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) [ 639.552802][T21281] ptm ptm5: ldisc open failed (-12), clearing slot 5 18:17:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:20 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)) r4 = dup(r3) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:20 executing program 3: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040), 0x2c, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="640f01c3b800008ed8c28ed2ba4100ed670f0118baf80c66b8d44ddd8d66efbafc0c66ed66b96903000066b80030000066ba000000000f30642e660f388221660f72d3fced", 0x45}], 0x1, 0x4, &(0x7f0000000180), 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f01cf3e0f0766b8ea18e9880f23c80f21f86635080070000f23f8ea0000ac000fc4460597f30fc7363a100f20d86635080000000f22d836660f54d30fc728d3c3", 0x41}], 0x0, 0x58, 0x0, 0x0) [ 639.697346][ T3681] usb 5-1: new high-speed USB device number 39 using dummy_hcd 18:17:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:20 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xafb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "4e67b4976d75907df5c976e9ad1749055b69860e3a1af19aa8f1acbd4880b803aa86243a537d30ac317e07cb87bcb0f2a37759296416730916d6ef5828e77f9fb7588aa3ac42e6a8a90a51d6a410382c9df3a833be9941152e4f97f1bdbe783db604175f412f8cb91eba80d210c26cce82cefffe97d1cdae387735151202864024553e06685c3189a57d33e4948c502660a206794b850c4120b9a59a21ded2e105574b157cbf34f127b56319c2bbf6128c5e2ee679947abad88c98"}, 0xbf) (async) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) 18:17:20 executing program 1: r0 = syz_open_dev$dri(0x0, 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) [ 639.957322][ T3681] usb 5-1: Using ep0 maxpacket: 16 [ 640.097429][ T3681] usb 5-1: config 1 interface 0 altsetting 147 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 640.133166][ T3681] usb 5-1: config 1 interface 0 altsetting 147 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.152795][ T3681] usb 5-1: config 1 interface 0 has no altsetting 0 [ 640.327469][ T3681] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 640.336721][ T3681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.345251][ T3681] usb 5-1: Product: syz [ 640.349874][ T3681] usb 5-1: Manufacturer: 넱甽偏䱃琒념倩뺬𭛹㡘됋뮃롙䯽鉕džＰ撗㧄髂쯪宍 [ 640.360818][ T3681] usb 5-1: SerialNumber: syz [ 640.857508][ T3681] usbhid 5-1:1.0: can't add hid device: -71 [ 640.863527][ T3681] usbhid: probe of 5-1:1.0 failed with error -71 [ 640.882886][ T3681] usb 5-1: USB disconnect, device number 39 18:17:21 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001600)) timer_delete(0x0) 18:17:21 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)) (async) r4 = dup(r3) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:21 executing program 3: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040), 0x2c, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="640f01c3b800008ed8c28ed2ba4100ed670f0118baf80c66b8d44ddd8d66efbafc0c66ed66b96903000066b80030000066ba000000000f30642e660f388221660f72d3fced", 0x45}], 0x1, 0x4, &(0x7f0000000180), 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f01cf3e0f0766b8ea18e9880f23c80f21f86635080070000f23f8ea0000ac000fc4460597f30fc7363a100f20d86635080000000f22d836660f54d30fc728d3c3", 0x41}], 0x0, 0x58, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040), 0x2c, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="640f01c3b800008ed8c28ed2ba4100ed670f0118baf80c66b8d44ddd8d66efbafc0c66ed66b96903000066b80030000066ba000000000f30642e660f388221660f72d3fced", 0x45}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f01cf3e0f0766b8ea18e9880f23c80f21f86635080070000f23f8ea0000ac000fc4460597f30fc7363a100f20d86635080000000f22d836660f54d30fc728d3c3", 0x41}], 0x0, 0x58, 0x0, 0x0) (async) 18:17:21 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x3, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000ac0)={&(0x7f00000009c0), 0x6, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 18:17:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:21 executing program 3: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040), 0x2c, 0x2) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="640f01c3b800008ed8c28ed2ba4100ed670f0118baf80c66b8d44ddd8d66efbafc0c66ed66b96903000066b80030000066ba000000000f30642e660f388221660f72d3fced", 0x45}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async, rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f01cf3e0f0766b8ea18e9880f23c80f21f86635080070000f23f8ea0000ac000fc4460597f30fc7363a100f20d86635080000000f22d836660f54d30fc728d3c3", 0x41}], 0x0, 0x58, 0x0, 0x0) 18:17:21 executing program 4: timer_create(0x0, &(0x7f0000002800)={0x0, 0x0, 0x4, @thr={&(0x7f0000001700), 0x0}}, 0x0) 18:17:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:22 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:22 executing program 4: getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) 18:17:22 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) (rerun: 32) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:22 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x3ff], 0x1}) 18:17:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) 18:17:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x0, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:22 executing program 0: unshare(0x40000000) unshare(0x18000e00) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="5a92f5690bd9028b9a57249d12df7086bb3fafc545017a5b4b5d6759abc7690eb07fc03655a4642ef38c261a85873c0225e94e98bb8d42210560f9bcd8748975a0509d8e6eb979024beacdc0a14db2556a4b9b27b7fb2cb6ad5d0a7031f646a02be1948daeb8a2dc86ff8304fd95988e6c34d6e3162f6873ce558e387bac286fc128cedec34bf5bad36b27bcbcc38f350a84a71b53678bee3d0ce4aaaf297cd473bcc3ca7b841f135a2187559f6c2967fcfbb0ff27c6771d3e2c1310f635091b9d9c06bd91ba96fe305e6306b3285471d69761e99ebc9044651a6df6299b0129aabaa8553fcc6c6eb7faa08840d501b913725cd1a155c1d60e5edaa9410fae", 0xff}, {&(0x7f00000003c0)="73dae6dadf3d366991f3507b4e88b62d6a03ad260a1c2268ea7ffb56411be90c36dc2e22b5ed14d768e333d57e4dd482d45ab6d13e784c4071103c17ad731e57aa19557daef452235e3833738b6987b6e42a4d7a70f3a0443bde6267fff27897618b9bb528d00290fc41980d70b14b94271e0e961fbe2421d1c63b7c5c69d4cbb87a1a66312a72edb3d063548f240f8bf4f65a75c217bc5becf74b5b40c80073d824606c3a9395a3652dc35627b934fc822ce1b7320bb7469b2b574b5a721e23b998968a6851ad35c6", 0xc9}], 0x2, 0x0, 0x0, 0x20000844}}, {{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="f0bf09c2d8f4575379084124360ba36a1092f18a1ad892e80dcf0f26f6ef132a2ad7f75581b195686dd6e815ec4803ad", 0x30}, {&(0x7f0000000500)="0e13a34c54ca31628f3b5f996be08cf4093f54c0980ab59ab185f879d5d1a418e4c0b0d4fc5dc6b7e3cc0e60712270ab", 0x30}, {&(0x7f0000000540)="e6fb7d1fef044f050a4ac4e24dbdd3eeba31275ca68c1610742d6aeaa808021c21310bca7dc373c5124b4a3b564d777e8153236474085d87378a6baa8c45edc93075ac1962afd3770e02891c8e44fdb1aa139c9b90208d23e7f09f1497230af7529bc88930e48493b80b3a4a99c1efdac7a6f5", 0x73}, {&(0x7f00000005c0)="fefd36a63b6d42fc529126fc878ea12d447f7787bcf011a64efa75eab0f8f5851ae0ef2b8a30564ff51fec6a99bb77ad05f226b1b8455f75eb3ff052047830089b5449cf7e2088269335752feecb61cabcf420718d318b20aaf3882dca5774a4a531ad1d1af683cb103d4d07fc1f712efca916930c69cdc90af96833f5dc57f0735b06d8af7be5279257459d6f37ac91c30a45ca0316c0263f6329136681cd160e6c27723544dda3ffefd8c767038bc94103254c964d1d7d874ff0a30666804e01eb1153bd5a786e", 0xc8}, {&(0x7f00000006c0)="d9fd3cb9f2b651da5ae9a3ddffd05651e659d766dd1fc718533d677ff543f0294275273645485d2678ede1aca494bc42e6c3e798c70343b7dadc0186151d58ae925f702136fa286f235a0bd1978c76a0b1f07de816f05c3bd274b43c6de716fbe8c2d45862bfad769390b7f3ac77ae53e8edc59d2ee011a96c4de39daad05d5e130c9d0eba70ed017f96cd49a98a67ee250cd01a256dd88a54c771f0", 0x9c}, {&(0x7f0000000780)="fb64cfe7e56656c5d732c4406ecd44", 0xf}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf8, 0x800}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c40)="004c8352c7a011fbc2a5b96737947f2f0991069d9cec00e91aa684c60009478467741d63a40d014a405a1641a51037bf05ab1aab7dbb", 0x36}, {&(0x7f0000000c80)="787593355de7c59ce6d5cb47e4a478459385a84085ee806875a5927d97a748f88bc4410b2744d6095b869624f9cd5dac2a05d5770fd2b52f7cd8ddbec2105d5845f41728314aae0165ec17c698373fda43b1223d5a1b35acd15b91688b7ab5932ec200015c8880103a5a6f132b8ea2197a9c979e5b9f14a065b058b82c8b92a2637d755aa956e6382a1b7e725f4ea9c8bcc811cba7f3e9a067784761f7a7218f61be3c891a17fdcb90525e97afc8662d48341678f9d33ec71982833ab769ab6d7df0ce688fe04dde3cbb6b314abbe8a72339da1420f34666aa93cd8ce8f01ef89052676b1e883fc6b8b68c99a89abf0837f12286c97c7b", 0xf7}, {&(0x7f0000000d80)="ddb7061c644493ae7001823ba9c0ddad52ff4a700342165ff9e96e868dd490168715c85f221d4045b3f6c88737f34a483ac2e0e78bb1", 0x36}, {&(0x7f0000000dc0)="d4d75d7915c9f4c921a07a4acb1d0caeae016fa423c35975bc9579dac6d3", 0x1e}, {&(0x7f0000000e00)="e09a2f941e8547f93ac2ec96dec7486e22742a0cea278f46b998e2f0798adc339441892198fede517788e86fe1017b801225aca53e7a76bf91777e68a9adc572", 0x40}, {&(0x7f0000000e40)="6deeb087f7a01c1765f01bbf2a05dead826cc7b4873d2da244534e2f694cbe4490b11bea88149ee6c23b4884652908e720f9c0f267da560fcc1f15f0d5ba9e052bf214536a55350d2817d2011d4ee9b38f40984b2c080a077e8e82756ce49ff0d5c54dfb2ba072119802e587d171d0b3e0362e71520c488714985283278682057a9cea34e841f39f0d6645165b206fd2112758b698108b04db8477da3226d1183e91e7353aacfa8e1078903166583ed196786e02ca6ce0d5600cc21ce66e061abece4015b103de70533b66262e28a637166aeacc2b9eb307801b8608ce5da2dd9fb17da426ed", 0xe6}, {&(0x7f0000000f40)="b4bb9503776a4ae5a82f23d71ed5351275b6798a52c855297d1b3938cfeecfc35cc1d6f7bc6cfb4c5906761f2fdff65b17135919453b8a7edefe2f3f01f3c1d10754508cf1cccf7eeb212f1616b6b7605fd3e7e0043da84cd051791ef26cf87349956f992ca0d62f477086b2b8ff", 0x6e}, {&(0x7f0000000fc0)="299da91138891a0787f943d32999683dca0b8f84e26a802823e4abf307a05acd185d80a5af97cd63ba6829bbb8b5040467bb1208d4614236081b7fa3299ac346405a364e66d57da5f4e49e892e84952eece3f8bb6597d1f51d81ddd56b03c5029b16fae2d3ece7cd562508e6d025680e7dc49e2218c6f86c213f6021072087b2355094b5b57bc72cf100958ac1d047c5ce7dd055959627e8eb40840e79b32095d38f6d60f08014d97151c35268a0521f23657bf9f6eb1882f2d7cfb1aab5a3b42d01b791ec011ad2a0ffb1e21b76d4225f817b8d704775a56d45e9d7e4e33b5be387e4cd7bee687dc973a69ffe269962da", 0xf1}, {&(0x7f00000010c0)="b1e3e6c74611", 0x6}], 0x9, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb0, 0x40440c4}}], 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000210000012bbd7000fddbdf25020014404e00000010000000080001007f0000010c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800010000000000050016002c0001"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x8810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:22 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xd0f45d13e87bf178) 18:17:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 18:17:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85ffffff}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000014c0)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 18:17:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 18:17:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 18:17:22 executing program 4: syz_clone(0x658e9000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:17:23 executing program 5: unshare(0x40000000) (async, rerun: 32) unshare(0x18000e00) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0}) 18:17:23 executing program 0: unshare(0x40000000) unshare(0x18000e00) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="5a92f5690bd9028b9a57249d12df7086bb3fafc545017a5b4b5d6759abc7690eb07fc03655a4642ef38c261a85873c0225e94e98bb8d42210560f9bcd8748975a0509d8e6eb979024beacdc0a14db2556a4b9b27b7fb2cb6ad5d0a7031f646a02be1948daeb8a2dc86ff8304fd95988e6c34d6e3162f6873ce558e387bac286fc128cedec34bf5bad36b27bcbcc38f350a84a71b53678bee3d0ce4aaaf297cd473bcc3ca7b841f135a2187559f6c2967fcfbb0ff27c6771d3e2c1310f635091b9d9c06bd91ba96fe305e6306b3285471d69761e99ebc9044651a6df6299b0129aabaa8553fcc6c6eb7faa08840d501b913725cd1a155c1d60e5edaa9410fae", 0xff}, {&(0x7f00000003c0)="73dae6dadf3d366991f3507b4e88b62d6a03ad260a1c2268ea7ffb56411be90c36dc2e22b5ed14d768e333d57e4dd482d45ab6d13e784c4071103c17ad731e57aa19557daef452235e3833738b6987b6e42a4d7a70f3a0443bde6267fff27897618b9bb528d00290fc41980d70b14b94271e0e961fbe2421d1c63b7c5c69d4cbb87a1a66312a72edb3d063548f240f8bf4f65a75c217bc5becf74b5b40c80073d824606c3a9395a3652dc35627b934fc822ce1b7320bb7469b2b574b5a721e23b998968a6851ad35c6", 0xc9}], 0x2, 0x0, 0x0, 0x20000844}}, {{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="f0bf09c2d8f4575379084124360ba36a1092f18a1ad892e80dcf0f26f6ef132a2ad7f75581b195686dd6e815ec4803ad", 0x30}, {&(0x7f0000000500)="0e13a34c54ca31628f3b5f996be08cf4093f54c0980ab59ab185f879d5d1a418e4c0b0d4fc5dc6b7e3cc0e60712270ab", 0x30}, {&(0x7f0000000540)="e6fb7d1fef044f050a4ac4e24dbdd3eeba31275ca68c1610742d6aeaa808021c21310bca7dc373c5124b4a3b564d777e8153236474085d87378a6baa8c45edc93075ac1962afd3770e02891c8e44fdb1aa139c9b90208d23e7f09f1497230af7529bc88930e48493b80b3a4a99c1efdac7a6f5", 0x73}, {&(0x7f00000005c0)="fefd36a63b6d42fc529126fc878ea12d447f7787bcf011a64efa75eab0f8f5851ae0ef2b8a30564ff51fec6a99bb77ad05f226b1b8455f75eb3ff052047830089b5449cf7e2088269335752feecb61cabcf420718d318b20aaf3882dca5774a4a531ad1d1af683cb103d4d07fc1f712efca916930c69cdc90af96833f5dc57f0735b06d8af7be5279257459d6f37ac91c30a45ca0316c0263f6329136681cd160e6c27723544dda3ffefd8c767038bc94103254c964d1d7d874ff0a30666804e01eb1153bd5a786e", 0xc8}, {&(0x7f00000006c0)="d9fd3cb9f2b651da5ae9a3ddffd05651e659d766dd1fc718533d677ff543f0294275273645485d2678ede1aca494bc42e6c3e798c70343b7dadc0186151d58ae925f702136fa286f235a0bd1978c76a0b1f07de816f05c3bd274b43c6de716fbe8c2d45862bfad769390b7f3ac77ae53e8edc59d2ee011a96c4de39daad05d5e130c9d0eba70ed017f96cd49a98a67ee250cd01a256dd88a54c771f0", 0x9c}, {&(0x7f0000000780)="fb64cfe7e56656c5d732c4406ecd44", 0xf}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf8, 0x800}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c40)="004c8352c7a011fbc2a5b96737947f2f0991069d9cec00e91aa684c60009478467741d63a40d014a405a1641a51037bf05ab1aab7dbb", 0x36}, {&(0x7f0000000c80)="787593355de7c59ce6d5cb47e4a478459385a84085ee806875a5927d97a748f88bc4410b2744d6095b869624f9cd5dac2a05d5770fd2b52f7cd8ddbec2105d5845f41728314aae0165ec17c698373fda43b1223d5a1b35acd15b91688b7ab5932ec200015c8880103a5a6f132b8ea2197a9c979e5b9f14a065b058b82c8b92a2637d755aa956e6382a1b7e725f4ea9c8bcc811cba7f3e9a067784761f7a7218f61be3c891a17fdcb90525e97afc8662d48341678f9d33ec71982833ab769ab6d7df0ce688fe04dde3cbb6b314abbe8a72339da1420f34666aa93cd8ce8f01ef89052676b1e883fc6b8b68c99a89abf0837f12286c97c7b", 0xf7}, {&(0x7f0000000d80)="ddb7061c644493ae7001823ba9c0ddad52ff4a700342165ff9e96e868dd490168715c85f221d4045b3f6c88737f34a483ac2e0e78bb1", 0x36}, {&(0x7f0000000dc0)="d4d75d7915c9f4c921a07a4acb1d0caeae016fa423c35975bc9579dac6d3", 0x1e}, {&(0x7f0000000e00)="e09a2f941e8547f93ac2ec96dec7486e22742a0cea278f46b998e2f0798adc339441892198fede517788e86fe1017b801225aca53e7a76bf91777e68a9adc572", 0x40}, {&(0x7f0000000e40)="6deeb087f7a01c1765f01bbf2a05dead826cc7b4873d2da244534e2f694cbe4490b11bea88149ee6c23b4884652908e720f9c0f267da560fcc1f15f0d5ba9e052bf214536a55350d2817d2011d4ee9b38f40984b2c080a077e8e82756ce49ff0d5c54dfb2ba072119802e587d171d0b3e0362e71520c488714985283278682057a9cea34e841f39f0d6645165b206fd2112758b698108b04db8477da3226d1183e91e7353aacfa8e1078903166583ed196786e02ca6ce0d5600cc21ce66e061abece4015b103de70533b66262e28a637166aeacc2b9eb307801b8608ce5da2dd9fb17da426ed", 0xe6}, {&(0x7f0000000f40)="b4bb9503776a4ae5a82f23d71ed5351275b6798a52c855297d1b3938cfeecfc35cc1d6f7bc6cfb4c5906761f2fdff65b17135919453b8a7edefe2f3f01f3c1d10754508cf1cccf7eeb212f1616b6b7605fd3e7e0043da84cd051791ef26cf87349956f992ca0d62f477086b2b8ff", 0x6e}, {&(0x7f0000000fc0)="299da91138891a0787f943d32999683dca0b8f84e26a802823e4abf307a05acd185d80a5af97cd63ba6829bbb8b5040467bb1208d4614236081b7fa3299ac346405a364e66d57da5f4e49e892e84952eece3f8bb6597d1f51d81ddd56b03c5029b16fae2d3ece7cd562508e6d025680e7dc49e2218c6f86c213f6021072087b2355094b5b57bc72cf100958ac1d047c5ce7dd055959627e8eb40840e79b32095d38f6d60f08014d97151c35268a0521f23657bf9f6eb1882f2d7cfb1aab5a3b42d01b791ec011ad2a0ffb1e21b76d4225f817b8d704775a56d45e9d7e4e33b5be387e4cd7bee687dc973a69ffe269962da", 0xf1}, {&(0x7f00000010c0)="b1e3e6c74611", 0x6}], 0x9, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb0, 0x40440c4}}], 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000210000012bbd7000fddbdf25020014404e00000010000000080001007f0000010c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800010000000000050016002c0001"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x8810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="73dae6dadf3d366991f3507b4e88b62d6a03ad260a1c2268ea7ffb56411be90c36dc2e22b5ed14d768e333d57e4dd482d45ab6d13e784c4071103c17ad731e57aa19557daef452235e3833738b6987b6e42a4d7a70f3a0443bde6267fff27897618b9bb528d00290fc41980d70b14b94271e0e961fbe2421d1c63b7c5c69d4cbb87a1a66312a72edb3d063548f240f8bf4f65a75c217bc5becf74b5b40c80073d824606c3a9395a3652dc35627b934fc822ce1b7320bb7469b2b574b5a721e23b998968a6851ad35c6", 0xc9}], 0x2, 0x0, 0x0, 0x20000844}}, {{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="f0bf09c2d8f4575379084124360ba36a1092f18a1ad892e80dcf0f26f6ef132a2ad7f75581b195686dd6e815ec4803ad", 0x30}, {&(0x7f0000000500)="0e13a34c54ca31628f3b5f996be08cf4093f54c0980ab59ab185f879d5d1a418e4c0b0d4fc5dc6b7e3cc0e60712270ab", 0x30}, {&(0x7f0000000540)="e6fb7d1fef044f050a4ac4e24dbdd3eeba31275ca68c1610742d6aeaa808021c21310bca7dc373c5124b4a3b564d777e8153236474085d87378a6baa8c45edc93075ac1962afd3770e02891c8e44fdb1aa139c9b90208d23e7f09f1497230af7529bc88930e48493b80b3a4a99c1efdac7a6f5", 0x73}, {&(0x7f00000005c0)="fefd36a63b6d42fc529126fc878ea12d447f7787bcf011a64efa75eab0f8f5851ae0ef2b8a30564ff51fec6a99bb77ad05f226b1b8455f75eb3ff052047830089b5449cf7e2088269335752feecb61cabcf420718d318b20aaf3882dca5774a4a531ad1d1af683cb103d4d07fc1f712efca916930c69cdc90af96833f5dc57f0735b06d8af7be5279257459d6f37ac91c30a45ca0316c0263f6329136681cd160e6c27723544dda3ffefd8c767038bc94103254c964d1d7d874ff0a30666804e01eb1153bd5a786e", 0xc8}, {&(0x7f00000006c0)="d9fd3cb9f2b651da5ae9a3ddffd05651e659d766dd1fc718533d677ff543f0294275273645485d2678ede1aca494bc42e6c3e798c70343b7dadc0186151d58ae925f702136fa286f235a0bd1978c76a0b1f07de816f05c3bd274b43c6de716fbe8c2d45862bfad769390b7f3ac77ae53e8edc59d2ee011a96c4de39daad05d5e130c9d0eba70ed017f96cd49a98a67ee250cd01a256dd88a54c771f0", 0x9c}, {&(0x7f0000000780)="fb64cfe7e56656c5d732c4406ecd44", 0xf}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf8, 0x800}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c40)="004c8352c7a011fbc2a5b96737947f2f0991069d9cec00e91aa684c60009478467741d63a40d014a405a1641a51037bf05ab1aab7dbb", 0x36}, {&(0x7f0000000c80)="787593355de7c59ce6d5cb47e4a478459385a84085ee806875a5927d97a748f88bc4410b2744d6095b869624f9cd5dac2a05d5770fd2b52f7cd8ddbec2105d5845f41728314aae0165ec17c698373fda43b1223d5a1b35acd15b91688b7ab5932ec200015c8880103a5a6f132b8ea2197a9c979e5b9f14a065b058b82c8b92a2637d755aa956e6382a1b7e725f4ea9c8bcc811cba7f3e9a067784761f7a7218f61be3c891a17fdcb90525e97afc8662d48341678f9d33ec71982833ab769ab6d7df0ce688fe04dde3cbb6b314abbe8a72339da1420f34666aa93cd8ce8f01ef89052676b1e883fc6b8b68c99a89abf0837f12286c97c7b", 0xf7}, {&(0x7f0000000d80)="ddb7061c644493ae7001823ba9c0ddad52ff4a700342165ff9e96e868dd490168715c85f221d4045b3f6c88737f34a483ac2e0e78bb1", 0x36}, {&(0x7f0000000dc0)="d4d75d7915c9f4c921a07a4acb1d0caeae016fa423c35975bc9579dac6d3", 0x1e}, {&(0x7f0000000e00)="e09a2f941e8547f93ac2ec96dec7486e22742a0cea278f46b998e2f0798adc339441892198fede517788e86fe1017b801225aca53e7a76bf91777e68a9adc572", 0x40}, {&(0x7f0000000e40)="6deeb087f7a01c1765f01bbf2a05dead826cc7b4873d2da244534e2f694cbe4490b11bea88149ee6c23b4884652908e720f9c0f267da560fcc1f15f0d5ba9e052bf214536a55350d2817d2011d4ee9b38f40984b2c080a077e8e82756ce49ff0d5c54dfb2ba072119802e587d171d0b3e0362e71520c488714985283278682057a9cea34e841f39f0d6645165b206fd2112758b698108b04db8477da3226d1183e91e7353aacfa8e1078903166583ed196786e02ca6ce0d5600cc21ce66e061abece4015b103de70533b66262e28a637166aeacc2b9eb307801b8608ce5da2dd9fb17da426ed", 0xe6}, {&(0x7f0000000f40)="b4bb9503776a4ae5a82f23d71ed5351275b6798a52c855297d1b3938cfeecfc35cc1d6f7bc6cfb4c5906761f2fdff65b17135919453b8a7edefe2f3f01f3c1d10754508cf1cccf7eeb212f1616b6b7605fd3e7e0043da84cd051791ef26cf87349956f992ca0d62f477086b2b8ff", 0x6e}, {&(0x7f0000000fc0)="299da91138891a0787f943d32999683dca0b8f84e26a802823e4abf307a05acd185d80a5af97cd63ba6829bbb8b5040467bb1208d4614236081b7fa3299ac346405a364e66d57da5f4e49e892e84952eece3f8bb6597d1f51d81ddd56b03c5029b16fae2d3ece7cd562508e6d025680e7dc49e2218c6f86c213f6021072087b2355094b5b57bc72cf100958ac1d047c5ce7dd055959627e8eb40840e79b32095d38f6d60f08014d97151c35268a0521f23657bf9f6eb1882f2d7cfb1aab5a3b42d01b791ec011ad2a0ffb1e21b76d4225f817b8d704775a56d45e9d7e4e33b5be387e4cd7bee687dc973a69ffe269962da", 0xf1}, {&(0x7f00000010c0)="b1e3e6c74611", 0x6}], 0x9, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb0, 0x40440c4}}], 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000210000012bbd7000fddbdf25020014404e00000010000000080001007f0000010c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800010000000000050016002c0001"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x8810) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) 18:17:23 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5451, 0x0) 18:17:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x0, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x1, 0x3f00}}, 0x20) 18:17:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0}) 18:17:24 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 18:17:24 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 18:17:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0}) 18:17:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r2, 0x0) (async) dup3(r3, r2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) 18:17:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x5b}, 0x14}}, 0x0) 18:17:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)}) 18:17:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x3f, 0x0, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) close_range(r5, r7, 0x0) r10 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:25 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="73dae6dadf3d366991f3507b4e88b62d6a03ad260a1c2268ea7ffb56411be90c36dc2e22b5ed14d768e333d57e4dd482d45ab6d13e784c4071103c17ad731e57aa19557daef452235e3833738b6987b6e42a4d7a70f3a0443bde6267fff27897618b9bb528d00290fc41980d70b14b94271e0e961fbe2421d1c63b7c5c69d4cbb87a1a66312a72edb3d063548f240f8bf4f65a75c217bc5becf74b5b40c80073d824606c3a9395a3652dc35627b934fc822ce1b7320bb7469b2b574b5a721e23b998968a6851ad35c6", 0xc9}], 0x2, 0x0, 0x0, 0x20000844}}, {{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="f0bf09c2d8f4575379084124360ba36a1092f18a1ad892e80dcf0f26f6ef132a2ad7f75581b195686dd6e815ec4803ad", 0x30}, {&(0x7f0000000500)="0e13a34c54ca31628f3b5f996be08cf4093f54c0980ab59ab185f879d5d1a418e4c0b0d4fc5dc6b7e3cc0e60712270ab", 0x30}, {&(0x7f0000000540)="e6fb7d1fef044f050a4ac4e24dbdd3eeba31275ca68c1610742d6aeaa808021c21310bca7dc373c5124b4a3b564d777e8153236474085d87378a6baa8c45edc93075ac1962afd3770e02891c8e44fdb1aa139c9b90208d23e7f09f1497230af7529bc88930e48493b80b3a4a99c1efdac7a6f5", 0x73}, {&(0x7f00000005c0)="fefd36a63b6d42fc529126fc878ea12d447f7787bcf011a64efa75eab0f8f5851ae0ef2b8a30564ff51fec6a99bb77ad05f226b1b8455f75eb3ff052047830089b5449cf7e2088269335752feecb61cabcf420718d318b20aaf3882dca5774a4a531ad1d1af683cb103d4d07fc1f712efca916930c69cdc90af96833f5dc57f0735b06d8af7be5279257459d6f37ac91c30a45ca0316c0263f6329136681cd160e6c27723544dda3ffefd8c767038bc94103254c964d1d7d874ff0a30666804e01eb1153bd5a786e", 0xc8}, {&(0x7f00000006c0)="d9fd3cb9f2b651da5ae9a3ddffd05651e659d766dd1fc718533d677ff543f0294275273645485d2678ede1aca494bc42e6c3e798c70343b7dadc0186151d58ae925f702136fa286f235a0bd1978c76a0b1f07de816f05c3bd274b43c6de716fbe8c2d45862bfad769390b7f3ac77ae53e8edc59d2ee011a96c4de39daad05d5e130c9d0eba70ed017f96cd49a98a67ee250cd01a256dd88a54c771f0", 0x9c}, {&(0x7f0000000780)="fb64cfe7e56656c5d732c4406ecd44", 0xf}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf8, 0x800}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000c40)="004c8352c7a011fbc2a5b96737947f2f0991069d9cec00e91aa684c60009478467741d63a40d014a405a1641a51037bf05ab1aab7dbb", 0x36}, {&(0x7f0000000c80)="787593355de7c59ce6d5cb47e4a478459385a84085ee806875a5927d97a748f88bc4410b2744d6095b869624f9cd5dac2a05d5770fd2b52f7cd8ddbec2105d5845f41728314aae0165ec17c698373fda43b1223d5a1b35acd15b91688b7ab5932ec200015c8880103a5a6f132b8ea2197a9c979e5b9f14a065b058b82c8b92a2637d755aa956e6382a1b7e725f4ea9c8bcc811cba7f3e9a067784761f7a7218f61be3c891a17fdcb90525e97afc8662d48341678f9d33ec71982833ab769ab6d7df0ce688fe04dde3cbb6b314abbe8a72339da1420f34666aa93cd8ce8f01ef89052676b1e883fc6b8b68c99a89abf0837f12286c97c7b", 0xf7}, {&(0x7f0000000d80)="ddb7061c644493ae7001823ba9c0ddad52ff4a700342165ff9e96e868dd490168715c85f221d4045b3f6c88737f34a483ac2e0e78bb1", 0x36}, {&(0x7f0000000dc0)="d4d75d7915c9f4c921a07a4acb1d0caeae016fa423c35975bc9579dac6d3", 0x1e}, {&(0x7f0000000e00)="e09a2f941e8547f93ac2ec96dec7486e22742a0cea278f46b998e2f0798adc339441892198fede517788e86fe1017b801225aca53e7a76bf91777e68a9adc572", 0x40}, {&(0x7f0000000e40)="6deeb087f7a01c1765f01bbf2a05dead826cc7b4873d2da244534e2f694cbe4490b11bea88149ee6c23b4884652908e720f9c0f267da560fcc1f15f0d5ba9e052bf214536a55350d2817d2011d4ee9b38f40984b2c080a077e8e82756ce49ff0d5c54dfb2ba072119802e587d171d0b3e0362e71520c488714985283278682057a9cea34e841f39f0d6645165b206fd2112758b698108b04db8477da3226d1183e91e7353aacfa8e1078903166583ed196786e02ca6ce0d5600cc21ce66e061abece4015b103de70533b66262e28a637166aeacc2b9eb307801b8608ce5da2dd9fb17da426ed", 0xe6}, {&(0x7f0000000f40)="b4bb9503776a4ae5a82f23d71ed5351275b6798a52c855297d1b3938cfeecfc35cc1d6f7bc6cfb4c5906761f2fdff65b17135919453b8a7edefe2f3f01f3c1d10754508cf1cccf7eeb212f1616b6b7605fd3e7e0043da84cd051791ef26cf87349956f992ca0d62f477086b2b8ff", 0x6e}, {&(0x7f0000000fc0)="299da91138891a0787f943d32999683dca0b8f84e26a802823e4abf307a05acd185d80a5af97cd63ba6829bbb8b5040467bb1208d4614236081b7fa3299ac346405a364e66d57da5f4e49e892e84952eece3f8bb6597d1f51d81ddd56b03c5029b16fae2d3ece7cd562508e6d025680e7dc49e2218c6f86c213f6021072087b2355094b5b57bc72cf100958ac1d047c5ce7dd055959627e8eb40840e79b32095d38f6d60f08014d97151c35268a0521f23657bf9f6eb1882f2d7cfb1aab5a3b42d01b791ec011ad2a0ffb1e21b76d4225f817b8d704775a56d45e9d7e4e33b5be387e4cd7bee687dc973a69ffe269962da", 0xf1}, {&(0x7f00000010c0)="b1e3e6c74611", 0x6}], 0x9, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb0, 0x40440c4}}], 0x3, 0x1) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000210000012bbd7000fddbdf25020014404e00000010000000080001007f0000010c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800010000000000050016002c0001"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x8810) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:25 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x7, 0x4, 0x401, 0x80000000, 0xff, "e6cf2b79333622db14d1c2f0fd766891b7694d", 0x0, 0x1001}) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=""/270) r1 = dup(0xffffffffffffffff) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x3ff, 0x27400) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 18:17:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)}) 18:17:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 18:17:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)}) 18:17:25 executing program 4: setrlimit(0x7, &(0x7f0000000140)={0x4, 0x9}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18:17:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x96fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1}) 18:17:25 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040084, 0x0, 0x0) 18:17:25 executing program 4: socket$inet(0x2, 0x5, 0x1f) socketpair(0x23, 0x2, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xd8, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x1000, 0x3, 0x3ff, '\x00', 'syz1\x00', {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x38}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd993}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$rfkill(r3, &(0x7f0000000600), 0x8) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3c}}, 0x4008000) r4 = socket$inet6(0xa, 0x5, 0x7f) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000740)={@rand_addr=' \x01\x00'}, 0x14) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x6, 0xffffffff, 0x81, 0xe8c, 0x1, 0x800, '\x00', 0x0, r3, 0x5, 0x5, 0x4, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x4, 0x0, 0x80000000, 0x40, 0x1000, r3, 0x3, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x52, 0xe, 0x9, 0x0, 0x1}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000009c0)='syzkaller\x00', 0x42, 0x0, 0x0, 0x40f00, 0x9, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000a80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xf, 0x5, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r7, r3, r8, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}, 0x80) 18:17:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x0, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:26 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x7, 0x4, 0x401, 0x80000000, 0xff, "e6cf2b79333622db14d1c2f0fd766891b7694d", 0x0, 0x1001}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=""/270) (async) r1 = dup(0xffffffffffffffff) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x3ff, 0x27400) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:26 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b1, &(0x7f0000000100)) 18:17:26 executing program 4: socketpair(0xa, 0x3, 0x0, &(0x7f00000002c0)) 18:17:26 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9381, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x0, 0x7000000, 0x8000100000000}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_pts(r5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) (async) close_range(r5, r7, 0x0) (async) r10 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:26 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x4b49, 0x0) 18:17:26 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8937, &(0x7f0000000100)) 18:17:26 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)='?', 0x1, 0x0) 18:17:26 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8995, &(0x7f0000000100)) 18:17:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = syz_open_pts(r5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) (async) close_range(r5, r7, 0x0) r10 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:26 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x3f, 0x7d, 0x0, {0x0, 0x38, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, '', 0x2, '#-', 0x2, '),', 0x1, ')'}}, 0x3f) write$P9_RSTAT(r0, 0x0, 0x4f) 18:17:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x0, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:27 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9381, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x0, 0x7000000, 0x8000100000000}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9381, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x0, 0x7000000, 0x8000100000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x14}, 0x14}}, 0x0) 18:17:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x14}, 0x48) 18:17:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:27 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x7, 0x4, 0x401, 0x80000000, 0xff, "e6cf2b79333622db14d1c2f0fd766891b7694d", 0x0, 0x1001}) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=""/270) r1 = dup(0xffffffffffffffff) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x3ff, 0x27400) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x7, 0x4, 0x401, 0x80000000, 0xff, "e6cf2b79333622db14d1c2f0fd766891b7694d", 0x0, 0x1001}) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=""/270) (async) dup(0xffffffffffffffff) (async) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x3ff, 0x27400) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:27 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x1ff}]}) 18:17:27 executing program 4: socket$inet(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000980)=@framed={{}, [@generic={0x52, 0xe, 0x9, 0x0, 0x1}, @exit]}, &(0x7f00000009c0)='syzkaller\x00', 0x42, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xf, 0x5, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 18:17:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0xfffffffffffffffd}}, 0x0) 18:17:27 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000040)="eb", 0x1}], 0x1}}], 0x1, 0x0) 18:17:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:27 executing program 4: pselect6(0x0, 0x0, 0xfffffffffffffffc, 0x0, &(0x7f0000000140), 0x0) 18:17:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x4, 0x0, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:28 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89e0, 0x0) 18:17:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 18:17:28 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9381, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x0, 0x7000000, 0x8000100000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:28 executing program 5: unshare(0x40000000) unshare(0x200) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = dup(r0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x35) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:28 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x2, &(0x7f0000000140)=@raw=[@generic={0x40}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000180)='GPL\x00', 0x5, 0xe4, &(0x7f00000001c0)=""/228, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:28 executing program 4: socket$inet(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000980)=@framed={{}, [@exit]}, &(0x7f00000009c0)='syzkaller\x00', 0x42, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) 18:17:28 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8982, &(0x7f0000000100)) 18:17:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:28 executing program 5: unshare(0x40000000) (async) unshare(0x200) (async, rerun: 64) unshare(0x18000e00) (rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) (rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) (async) r1 = dup(r0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x35) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x0, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:28 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8918, 0x0) 18:17:28 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc018937e, 0x0) 18:17:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x9, &(0x7f0000000000)=@raw=[@alu, @map_fd, @map_idx, @btf_id, @alu={0x0, 0x0, 0x3}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:29 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x96, 0x1f, 0x70c, 0x0, @local, @local, 0x80, 0x700, 0x7fff, 0x8}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x685a81, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r1) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) 18:17:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 18:17:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) 18:17:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="f30f1efb0f0fbf26f9a666b97803000066b80080000066ba000000000f30f08163000b0066b8008000000f23c80f21f866350c00b0000f23f8640f0093bd043ea70f350f01c585ca", 0x48}], 0x1, 0xd, &(0x7f0000000180)=[@cr0={0x0, 0x4000001f}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r6 = syz_open_pts(r3, 0x0) r7 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:29 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, 0x0) 18:17:29 executing program 4: socketpair(0xc, 0x0, 0x0, &(0x7f0000000000)) 18:17:29 executing program 1: bpf$MAP_CREATE(0x23, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:17:29 executing program 5: unshare(0x40000000) (async) unshare(0x200) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) (async) r1 = dup(r0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x35) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x0, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:29 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5460, 0x0) 18:17:29 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x96, 0x1f, 0x70c, 0x0, @local, @local, 0x80, 0x700, 0x7fff, 0x8}}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x685a81, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = dup(r1) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) 18:17:29 executing program 1: clock_getres(0x5, &(0x7f00000001c0)) 18:17:29 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8946, &(0x7f0000000100)) 18:17:29 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 18:17:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="f30f1efb0f0fbf26f9a666b97803000066b80080000066ba000000000f30f08163000b0066b8008000000f23c80f21f866350c00b0000f23f8640f0093bd043ea70f350f01c585ca", 0x48}], 0x1, 0xd, &(0x7f0000000180)=[@cr0={0x0, 0x4000001f}], 0x1) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r6 = syz_open_pts(r3, 0x0) r7 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0, 0x250}], 0x1, 0x0) 18:17:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffffffffffffad, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 18:17:30 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x96, 0x1f, 0x70c, 0x0, @local, @local, 0x80, 0x700, 0x7fff, 0x8}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x685a81, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r1) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x96, 0x1f, 0x70c, 0x0, @local, @local, 0x80, 0x700, 0x7fff, 0x8}}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x685a81, 0x0) (async) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async) socket$nl_route(0x10, 0x3, 0x0) (async) dup(r1) (async) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:30 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x1, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:30 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8941, 0x0) 18:17:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 18:17:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x1ff, 0x0, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @loopback}, r1}}, 0x30) 18:17:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 18:17:30 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890c, &(0x7f0000000100)) 18:17:31 executing program 4: io_uring_setup(0x70ca, &(0x7f0000005880)={0x0, 0x0, 0x22}) 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="f30f1efb0f0fbf26f9a666b97803000066b80080000066ba000000000f30f08163000b0066b8008000000f23c80f21f866350c00b0000f23f8640f0093bd043ea70f350f01c585ca", 0x48}], 0x1, 0xd, &(0x7f0000000180)=[@cr0={0x0, 0x4000001f}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r6 = syz_open_pts(r3, 0x0) r7 = dup3(r6, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:31 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 18:17:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback={0x2}}, r1}}, 0x30) 18:17:31 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040891) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:31 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x1, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000080)=@framed={{}, [@call, @btf_id]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@multicast1}}, 0xe8) 18:17:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x0, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:31 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 18:17:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 18:17:31 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66ba200066ed66b88d008ee00f3066baf80cb805caef88ef66bafc0cecc4e23536ad00800000b98f0900000f32f08340cf00b805000000b9058000000f01d9f0826d99b1b9870500000f32", 0x4b}], 0x1, 0x60, 0x0, 0x0) 18:17:31 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x2) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040891) (async, rerun: 64) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x2, 0x0, 0x0, @dev}, r1}}, 0x48) 18:17:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9b8, 0x4}, 0x48) 18:17:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 18:17:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66ba200066ed66b88d008ee00f3066baf80cb805caef88ef66bafc0cecc4e23536ad00800000b98f0900000f32f08340cf00b805000000b9058000000f01d9f0826d99b1b9870500000f32", 0x4b}], 0x1, 0x60, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66ba200066ed66b88d008ee00f3066baf80cb805caef88ef66bafc0cecc4e23536ad00800000b98f0900000f32f08340cf00b805000000b9058000000f01d9f0826d99b1b9870500000f32", 0x4b}], 0x1, 0x60, 0x0, 0x0) (async) 18:17:31 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040891) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040891) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0x2}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x0, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:32 executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 18:17:32 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x501001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5fcde55b, 0x0) r4 = dup(r3) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="66ba200066ed66b88d008ee00f3066baf80cb805caef88ef66bafc0cecc4e23536ad00800000b98f0900000f32f08340cf00b805000000b9058000000f01d9f0826d99b1b9870500000f32", 0x4b}], 0x1, 0x60, 0x0, 0x0) 18:17:32 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x0, {0x80}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0)={[0xcea]}, 0x8) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:32 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0xf}, 0x20) 18:17:32 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0xf}, 0x20) 18:17:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f01f1470f017ff666baf80cb84e511f83ef66bafc0cb0f1ee66baa00066edc4a1cb7d1f65673636660f38807bac3e3e3e2e0f11ddc4a2ad017a09420f32f3440fbd6e4b", 0x44}], 0x1, 0x66, &(0x7f0000000200), 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="26660f3a0ba309006566b95908000066b80500000066ba000000000f300f01c20f0d58bc650fc7ae07002e660f388157f80fc73e2500f3640f015d2e652e0fc7aee100baf80c66b840e9418266efbafc0c66b80080000066ef", 0x59}], 0x1, 0x7, &(0x7f00000002c0)=[@cstype3={0x5, 0xf}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x400, 0x0, "0040001f1d113c81fcf76000"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:32 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x80087601, 0x0) 18:17:32 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 18:17:32 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000001000)) 18:17:33 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x501001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5fcde55b, 0x0) r4 = dup(r3) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x7, 0x0, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:33 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') clock_gettime(0x0, &(0x7f0000000040)) 18:17:33 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x501001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5fcde55b, 0x0) r4 = dup(r3) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:33 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x0, {0x80}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0)={[0xcea]}, 0x8) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f01f1470f017ff666baf80cb84e511f83ef66bafc0cb0f1ee66baa00066edc4a1cb7d1f65673636660f38807bac3e3e3e2e0f11ddc4a2ad017a09420f32f3440fbd6e4b", 0x44}], 0x1, 0x66, &(0x7f0000000200), 0x0) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="26660f3a0ba309006566b95908000066b80500000066ba000000000f300f01c20f0d58bc650fc7ae07002e660f388157f80fc73e2500f3640f015d2e652e0fc7aee100baf80c66b840e9418266efbafc0c66b80080000066ef", 0x59}], 0x1, 0x7, &(0x7f00000002c0)=[@cstype3={0x5, 0xf}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x400, 0x0, "0040001f1d113c81fcf76000"}) (async) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:33 executing program 4: futex_waitv(&(0x7f0000001f00)=[{0x0, &(0x7f0000000040)=0x8, 0x2}], 0x1, 0x0, 0x0, 0x0) 18:17:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @remote}}}, 0x90) 18:17:33 executing program 4: socket$inet(0x2, 0x5, 0x1f) 18:17:33 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8916, 0x0) 18:17:34 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f0000000900)) 18:17:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f01f1470f017ff666baf80cb84e511f83ef66bafc0cb0f1ee66baa00066edc4a1cb7d1f65673636660f38807bac3e3e3e2e0f11ddc4a2ad017a09420f32f3440fbd6e4b", 0x44}], 0x1, 0x66, &(0x7f0000000200), 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="26660f3a0ba309006566b95908000066b80500000066ba000000000f300f01c20f0d58bc650fc7ae07002e660f388157f80fc73e2500f3640f015d2e652e0fc7aee100baf80c66b840e9418266efbafc0c66b80080000066ef", 0x59}], 0x1, 0x7, &(0x7f00000002c0)=[@cstype3={0x5, 0xf}], 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x400, 0x0, "0040001f1d113c81fcf76000"}) (async) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x2, &(0x7f0000001200)=@raw=[@cb_func], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 18:17:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:34 executing program 4: socketpair(0x1e, 0x0, 0x8001, &(0x7f0000011f40)) 18:17:34 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x81) 18:17:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x541102) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_pts(r7, 0x43) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:34 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1903, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0xfffd, {0x40, 0x1}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:34 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x0, {0x80}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0)={[0xcea]}, 0x8) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x0, {0x80}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ppoll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2000}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0)={[0xcea]}, 0x8) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:34 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f0000000100)) 18:17:34 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8936, 0x0) 18:17:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @loopback}, r1}}, 0x30) 18:17:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 18:17:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x541102) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_pts(r7, 0x43) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 18:17:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:35 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8941, &(0x7f0000000100)) 18:17:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 18:17:35 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1903, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0xfffd, {0x40, 0x1}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:35 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x0, r1}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x701a01, 0x0) r3 = dup(r2) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="6e29e0bc9c78a14d3d2ca8ddd51ec5ca46507b1c1512430a24d329f7345c178536e70edc62637cd7ece94179c76139267cbd10c6cd6dfd8d07263e3717aa454c00bcb1488c934de37ddb355ae28759621abd594119002d912ca1a57c1b5e777a184f5eb924a6c1e7d0d4700f4c25a14a1ca52a156eb8bf3410bf5968565cf1d873fe30163a37413ba07f9efe9a0f5b3d4a9bbf30d46816e9921ffd0c5da7ca295eafb463a2714787398614e11641a7273fb4ad1e8235a6bad09f8e0d76e1b09f57f31f9670238e46c1b44c75df761b8b1c74c9ef398d719d415179888676425dc1cb", 0xe2}], 0x1, 0xfff, 0x1f) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x4001, {0x0, 0x80000, 0xffffffffffffffff}}, 0xa) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x145600) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) 18:17:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x541102) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_pts(r7, 0x43) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x541102) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_pts(r7, 0x43) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:35 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8927, &(0x7f0000000100)) 18:17:35 executing program 4: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894a, &(0x7f0000000100)) 18:17:35 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x0, r1}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x701a01, 0x0) r3 = dup(r2) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="6e29e0bc9c78a14d3d2ca8ddd51ec5ca46507b1c1512430a24d329f7345c178536e70edc62637cd7ece94179c76139267cbd10c6cd6dfd8d07263e3717aa454c00bcb1488c934de37ddb355ae28759621abd594119002d912ca1a57c1b5e777a184f5eb924a6c1e7d0d4700f4c25a14a1ca52a156eb8bf3410bf5968565cf1d873fe30163a37413ba07f9efe9a0f5b3d4a9bbf30d46816e9921ffd0c5da7ca295eafb463a2714787398614e11641a7273fb4ad1e8235a6bad09f8e0d76e1b09f57f31f9670238e46c1b44c75df761b8b1c74c9ef398d719d415179888676425dc1cb", 0xe2}], 0x1, 0xfff, 0x1f) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x4001, {0x0, 0x80000, 0xffffffffffffffff}}, 0xa) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x145600) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) creat(&(0x7f0000000080)='./file0\x00', 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x0, r1}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x701a01, 0x0) (async) dup(r2) (async) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="6e29e0bc9c78a14d3d2ca8ddd51ec5ca46507b1c1512430a24d329f7345c178536e70edc62637cd7ece94179c76139267cbd10c6cd6dfd8d07263e3717aa454c00bcb1488c934de37ddb355ae28759621abd594119002d912ca1a57c1b5e777a184f5eb924a6c1e7d0d4700f4c25a14a1ca52a156eb8bf3410bf5968565cf1d873fe30163a37413ba07f9efe9a0f5b3d4a9bbf30d46816e9921ffd0c5da7ca295eafb463a2714787398614e11641a7273fb4ad1e8235a6bad09f8e0d76e1b09f57f31f9670238e46c1b44c75df761b8b1c74c9ef398d719d415179888676425dc1cb", 0xe2}], 0x1, 0xfff, 0x1f) (async) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x4001, {0x0, 0x80000, 0xffffffffffffffff}}, 0xa) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x145600) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000011d00), 0x4) 18:17:35 executing program 4: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xfffffffffffffe62) 18:17:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x8, r6, 0x2}) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:36 executing program 4: socket$inet_icmp(0x2, 0x3, 0x2) 18:17:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 18:17:36 executing program 1: r0 = socket$inet_icmp(0xa, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8916, &(0x7f0000000100)) 18:17:36 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1903, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0xfffd, {0x40, 0x1}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1903, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0xfffd, {0x40, 0x1}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:36 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) 18:17:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000011c80)={0x18, 0x5, 0x0, &(0x7f0000011b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:36 executing program 1: io_uring_setup(0x479a, &(0x7f0000000500)={0x0, 0x8dfd}) 18:17:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x300}}, 0x20) 18:17:36 executing program 5: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x0, r1}, 0x80) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x701a01, 0x0) r3 = dup(r2) (async) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="6e29e0bc9c78a14d3d2ca8ddd51ec5ca46507b1c1512430a24d329f7345c178536e70edc62637cd7ece94179c76139267cbd10c6cd6dfd8d07263e3717aa454c00bcb1488c934de37ddb355ae28759621abd594119002d912ca1a57c1b5e777a184f5eb924a6c1e7d0d4700f4c25a14a1ca52a156eb8bf3410bf5968565cf1d873fe30163a37413ba07f9efe9a0f5b3d4a9bbf30d46816e9921ffd0c5da7ca295eafb463a2714787398614e11641a7273fb4ad1e8235a6bad09f8e0d76e1b09f57f31f9670238e46c1b44c75df761b8b1c74c9ef398d719d415179888676425dc1cb", 0xe2}], 0x1, 0xfff, 0x1f) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x4001, {0x0, 0x80000, 0xffffffffffffffff}}, 0xa) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x145600) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) 18:17:36 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="7a4ca653a2f7", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 18:17:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) 18:17:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) (async, rerun: 64) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x8, r6, 0x2}) (async) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:37 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189371, 0x0) 18:17:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) 18:17:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x0, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:37 executing program 0: unshare(0x40000000) unshare(0x1a000a00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) dup3(0xffffffffffffffff, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/243) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000480)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000004c0)='$', 0x1}, {&(0x7f0000000500)='o', 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001740)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) pipe2$watch_queue(0x0, 0x80) read$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:17:37 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 18:17:37 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, &(0x7f0000000380)={0x51, 0x7d, 0x0, {0x0, 0x4a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'rxrpc_rx_eproto\x00', 0x0, '', 0x7, 'batadv\x00'}}, 0xfdef) 18:17:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x8, r6, 0x2}) r7 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x8, r6, 0x2}) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x47, 0x0, 0x0) 18:17:37 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) unshare(0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000180)="c5", 0x1, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x1c}, 0x1c) 18:17:38 executing program 0: unshare(0x40000000) (async) unshare(0x1a000a00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) dup3(0xffffffffffffffff, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/243) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:38 executing program 1: fcntl$lock(0xffffffffffffffff, 0xf, 0x0) 18:17:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x0, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 18:17:38 executing program 4: fchownat(0xffffffffffffffff, &(0x7f00000015c0)='./file0/file0\x00', 0x0, 0x0, 0x0) 18:17:38 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) unshare(0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:38 executing program 1: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xde020f88a6a901b5, 0xffffffffffffff9c, 0x0) 18:17:38 executing program 0: unshare(0x40000000) unshare(0x1a000a00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) dup3(0xffffffffffffffff, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/243) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (rerun: 32) 18:17:38 executing program 1: openat$adsp1(0xffffff9c, &(0x7f0000000840), 0x208800, 0x0) 18:17:38 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 18:17:38 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 18:17:38 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0x8000000000000001, 0x2c9}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x24001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000005c0)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x4000) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x20000084) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 18:17:38 executing program 1: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 18:17:39 executing program 0: unshare(0x40000000) unshare(0x18000e00) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x0, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r5, 0x0) (async) dup3(r6, r5, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:39 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0x8000000000000001, 0x2c9}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x24001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000005c0)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x4000) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x20000084) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 18:17:39 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) unshare(0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) unshare(0x0) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:39 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x24001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) openat$vcsu(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000a40), 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) openat$audio(0xffffff9c, &(0x7f0000001000), 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001040), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 18:17:39 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, 0x0}, 0x80c0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) 18:17:39 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0x14) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:39 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:17:39 executing program 4: openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) 18:17:39 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x18, 0x0, 0x0, &(0x7f0000000480)) 18:17:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) 18:17:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x1, 0xf000, 0x2000, &(0x7f0000fed000/0x2000)=nil}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r5, 0x0) (async) dup3(r6, r5, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) [ 659.181140][ T27] audit: type=1326 audit(1652552259.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22218 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868a8890e9 code=0x0 18:17:40 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x24001, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x40000, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000) 18:17:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x0, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:40 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r0, 0x4004667f, 0x0) 18:17:40 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0x14) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:40 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000000)="c3787644", 0x4) 18:17:40 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff03) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:40 executing program 4: connect$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x18, 0x3}, 0xc) 18:17:40 executing program 1: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000640)) 18:17:40 executing program 4: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000000c0)=""/238) 18:17:40 executing program 1: semctl$SETALL(0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0]) 18:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x0, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:41 executing program 4: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 18:17:41 executing program 1: syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x80c00) 18:17:41 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff03) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:41 executing program 0: unshare(0x194e7af3dc81da0d) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCXONC(r0, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffffd24}, 0x8) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) 18:17:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80000000}) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) pwrite64(r6, &(0x7f00000001c0)="dd3a2a1a29bb116101c0c3427c7338e8602bc7", 0x13, 0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000140)) 18:17:41 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) 18:17:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2e7a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 18:17:41 executing program 5: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xffffffffffffff03) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:41 executing program 0: unshare(0x194e7af3dc81da0d) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffffd24}, 0x8) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) 18:17:41 executing program 0: unshare(0x194e7af3dc81da0d) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 64) ioctl$TCXONC(r0, 0x540a, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffffd24}, 0x8) (async) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4252) 18:17:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x5, 0x3}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0}, 0xc) 18:17:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x0, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@expire={0xf8, 0x18, 0x0, 0x0, 0x0, {{{@in=@multicast2, @in=@dev}, {}, @in6=@mcast2}}}, 0xf8}}, 0x48840) 18:17:42 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000d40)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:17:42 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl(0xffffffffffffffff, 0xd4fd, &(0x7f0000000340)="3ab8a13a3822771773e6525a42f3c3e8f369d72b7c6308cc96211f9c653caed67231197d34d42b7a6fa3731b9e4ea726584f9d917fb65709516acc898a18a51626d0dd585b09da42e7954af5daba97fdb6d37c7cd5ce7e03bce6c43c153307eb0682d8dfeb329c57a9ff26f59ca6539680846e103a6064f6de54342897845fc848e04a31d06fa1d198aeef235401203e4bd489c0726393dfae3663e6c5c0d021a6437bd723b85f258037943420ec0b515f8f7f242beae5953fadce0cc8ba66103726") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:42 executing program 5: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:17:42 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x2, &(0x7f0000000080)=@raw=[@generic={0x4}, @alu={0x4}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:42 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80000000}) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) pwrite64(r6, &(0x7f00000001c0)="dd3a2a1a29bb116101c0c3427c7338e8602bc7", 0x13, 0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80000000}) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) (async) pwrite64(r6, &(0x7f00000001c0)="dd3a2a1a29bb116101c0c3427c7338e8602bc7", 0x13, 0x7) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r7) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000140)) (async) 18:17:42 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) ioctl(0xffffffffffffffff, 0xd4fd, &(0x7f0000000340)="3ab8a13a3822771773e6525a42f3c3e8f369d72b7c6308cc96211f9c653caed67231197d34d42b7a6fa3731b9e4ea726584f9d917fb65709516acc898a18a51626d0dd585b09da42e7954af5daba97fdb6d37c7cd5ce7e03bce6c43c153307eb0682d8dfeb329c57a9ff26f59ca6539680846e103a6064f6de54342897845fc848e04a31d06fa1d198aeef235401203e4bd489c0726393dfae3663e6c5c0d021a6437bd723b85f258037943420ec0b515f8f7f242beae5953fadce0cc8ba66103726") (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x11, &(0x7f0000000140)="e8fe97848431d3248a88abe566ced55e52"}) 18:17:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 18:17:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x0, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x4, 0x136, [0x20006880, 0x0, 0x0, 0x200068b0], 0x0, 0x0, &(0x7f0000006880)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x5, 0x0, 0x0, 'gre0\x00', 'vxcan1\x00', 'veth1_virt_wifi\x00', '\x00', @dev, [], @empty, [], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}]}, {0x0, '\x00', 0x1}]}, 0x1ae) 18:17:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x3) 18:17:42 executing program 5: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) (rerun: 64) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80000000}) (async) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) pwrite64(r6, &(0x7f00000001c0)="dd3a2a1a29bb116101c0c3427c7338e8602bc7", 0x13, 0x7) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000140)) 18:17:42 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1ff, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:17:43 executing program 4: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="28693930b57b2935cab925d744f3b44882f0fa451fee47feeb27d85c5b7b0bd73d9c137ffb8d7b276be11a7a2bc706c84799efcb72d9e9d9300a6bbe1897c5f4330344068ee7cbdd8d1ad92fd91f6ae1e53a5c9307a95db0", 0x58, r0) 18:17:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000004140)=0x1, 0x1) [ 662.491632][T22404] trusted_key: encrypted_key: insufficient parameters specified 18:17:43 executing program 4: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$describe(0x6, r1, 0x0, 0x0) 18:17:43 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl(0xffffffffffffffff, 0xd4fd, &(0x7f0000000340)="3ab8a13a3822771773e6525a42f3c3e8f369d72b7c6308cc96211f9c653caed67231197d34d42b7a6fa3731b9e4ea726584f9d917fb65709516acc898a18a51626d0dd585b09da42e7954af5daba97fdb6d37c7cd5ce7e03bce6c43c153307eb0682d8dfeb329c57a9ff26f59ca6539680846e103a6064f6de54342897845fc848e04a31d06fa1d198aeef235401203e4bd489c0726393dfae3663e6c5c0d021a6437bd723b85f258037943420ec0b515f8f7f242beae5953fadce0cc8ba66103726") (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x41000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:43 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000380)) 18:17:43 executing program 1: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 18:17:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x0, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:43 executing program 4: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 18:17:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:43 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5460, 0x0) 18:17:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 18:17:43 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0xffffffffffffffff}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:43 executing program 4: r0 = shmget(0x1, 0x4000, 0x54000a01, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) 18:17:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="ad", 0x1, 0x40800, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 18:17:44 executing program 4: syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:17:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x10, 0x8406) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x4004550d, 0x0) 18:17:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 18:17:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x0, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:44 executing program 4: syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:17:44 executing program 5: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 18:17:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x5) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:44 executing program 1: socket(0x3, 0x0, 0x40000000) 18:17:44 executing program 0: unshare(0x40000000) (async, rerun: 32) unshare(0x18000e00) (rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0xffffffffffffffff}}, 0x14) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) (async, rerun: 32) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (rerun: 32) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:44 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000200), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:17:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xe4c4, &(0x7f0000000140)='veth1\x00'}) 18:17:45 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x0, 0x0, {0x0, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x0, @link_local}, @udp_ip4_spec={@remote, @dev}, {0x0, @link_local}}}}) 18:17:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f78727f66b83d018ed8ea02f7c9630f01c74424000c1c0000c7442402e6ba1b74c7442406000000000f011c24c4c27922be75140000ea42bf57015000b8344400000f23c00f21f83503000b000f23f83e0fc7ad147c00000f20c035000000400f22c0c4e270f354bc75", 0x6b}], 0x1, 0x2c, &(0x7f0000000140)=[@dstype3={0x7, 0xa}], 0x1) dup3(r6, r3, 0x80000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) 18:17:45 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x3f, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) 18:17:45 executing program 5: syz_open_dev$media(&(0x7f0000000100), 0x0, 0x107100) 18:17:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0x0, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:45 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1ff, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:17:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @private}}}, 0x88) 18:17:45 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0189436, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f00000001c0)}) 18:17:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f78727f66b83d018ed8ea02f7c9630f01c74424000c1c0000c7442402e6ba1b74c7442406000000000f011c24c4c27922be75140000ea42bf57015000b8344400000f23c00f21f83503000b000f23f83e0fc7ad147c00000f20c035000000400f22c0c4e270f354bc75", 0x6b}], 0x1, 0x2c, &(0x7f0000000140)=[@dstype3={0x7, 0xa}], 0x1) (async) dup3(r6, r3, 0x80000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) 18:17:45 executing program 1: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000140)="9954", 0x1001, 0xffffffffffffffff) 18:17:45 executing program 5: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 18:17:45 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0xffffffffffffffff}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x7000000, 0xffffffffffffffff}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x28, 0x0, 0x0) 18:17:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000380)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 18:17:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@private, @empty}, 0x8) 18:17:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0x0, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 18:17:46 executing program 1: r0 = epoll_create(0x8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000004}) 18:17:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32) r4 = syz_open_pts(r3, 0x0) (rerun: 32) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f78727f66b83d018ed8ea02f7c9630f01c74424000c1c0000c7442402e6ba1b74c7442406000000000f011c24c4c27922be75140000ea42bf57015000b8344400000f23c00f21f83503000b000f23f83e0fc7ad147c00000f20c035000000400f22c0c4e270f354bc75", 0x6b}], 0x1, 0x2c, &(0x7f0000000140)=[@dstype3={0x7, 0xa}], 0x1) dup3(r6, r3, 0x80000) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) 18:17:46 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 18:17:46 executing program 4: add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000280)="cf32c0b800", 0x5, 0xffffffffffffffff) 18:17:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="00a662c29a1a00000000000000186200000d00000000000000070000802c437ccabb6bd670dec9373332fb965e5536"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xcb, &(0x7f0000000100)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 666.257259][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd 18:17:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x44, 0x1}, 0x12) 18:17:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 18:17:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x7, 0x1f}, {0xffa6, 0x101}, {0xffd, 0x4}, {0x1, 0x9}, {0x66b0, 0x1f}, {0x8, 0x6}, {0x8, 0x3}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) r6 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000300)) r8 = openat(r6, &(0x7f00000001c0)='./file0\x00', 0x800, 0x44) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000200)) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000180)=0x4) 18:17:46 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100e83, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/34) 18:17:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 666.527355][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 666.727388][ T22] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 666.736207][ T22] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 666.751050][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 18:17:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0x0, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macsec0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39}}) 18:17:47 executing program 1: syz_io_uring_setup(0x6085, &(0x7f0000000080)={0x0, 0x629a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x600, &(0x7f0000000140), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:17:47 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100e83, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/34) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100e83, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/34) (async) [ 666.937419][ T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.968684][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.990684][ T22] usb 6-1: Product: syz [ 666.999764][ T22] usb 6-1: Manufacturer: syz [ 667.013638][ T22] usb 6-1: SerialNumber: syz [ 667.357484][ T22] usb 6-1: 0:2 : does not exist [ 667.397793][ T22] usb 6-1: USB disconnect, device number 5 18:17:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000400)) 18:17:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x7, 0x1f}, {0xffa6, 0x101}, {0xffd, 0x4}, {0x1, 0x9}, {0x66b0, 0x1f}, {0x8, 0x6}, {0x8, 0x3}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) r6 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000300)) r8 = openat(r6, &(0x7f00000001c0)='./file0\x00', 0x800, 0x44) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000200)) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000180)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x7, 0x1f}, {0xffa6, 0x101}, {0xffd, 0x4}, {0x1, 0x9}, {0x66b0, 0x1f}, {0x8, 0x6}, {0x8, 0x3}]}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000300)) (async) openat(r6, &(0x7f00000001c0)='./file0\x00', 0x800, 0x44) (async) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000200)) (async) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000180)=0x4) (async) 18:17:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 18:17:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000780), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10027, 0x0, 0x0}) 18:17:48 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100e83, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/34) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100e83, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x4252) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/34) (async) 18:17:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x0, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 18:17:48 executing program 4: shmget(0x3, 0x4000, 0xf01, &(0x7f0000ff6000/0x4000)=nil) 18:17:48 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0045878, 0x0) 18:17:48 executing program 5: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r0) 18:17:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 18:17:48 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000004c0)) 18:17:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) syz_fuse_handle_req(r0, &(0x7f000000abc0)="1195ac9218230be8698e3c32212a907ef4ebdb358a3845acde78d80602e932aff327ea7fa73f792c40cebdba37cecd38ed8a684e8e7e17c283a4a8133578350204e227bc8b66e6e3e496a9058407be3b1c02fe6a537132a7dbb038450582558bc290991aa904db098add7df0dfbb1872456b02af0baa9d727d628215805b913a4a76742f8086dc1d4aeafee73a85593ad0b5894773faa16ba06cf2f5a42ff342dd413b65c59ee263d078e5224bfa88f40e834878bb4ddc596a258558f4faef188fcb81f6de204fa4c275aec29c3d198c8918c230e80cbbffb8b4847d949783042e0aa097ac44b197332210e6f983f88f077b8e9e98ab605534a19e2c7099bad58f5d45cc9e9132320a2c53696f9011a9e6410046f32556f58cacbd56b22e38206ae6f3b09eefd692c89d1434ec54964aaba6c6704863aba623d0a6f99ee44b353a29b1e0b3311509200ee9052c8a98127b2f60b73d8390a5ea306879122e314431dbebce943b924e2b02c6b7cae0ccf680fca614bd21e3d04fbda26ec22518ce189371a0757b334332f21f028571779919a1562a0c9fbcb2161060a4491761a5d1c75725665db8078cfbe681a5a486fdad7f53a300e8fe749c54be9807e2a1bea17a8b4e75f0f6e66d0b73b2db67b985c9fb0464343b4d8a4f7e3f7cf99ae2ccb5140791863f765b6334c08bb123ac632c0326db66baa39006083c9afe2573da0191b6866c089223271e3914cdf6806795e2ab2fc9f78cd6527088cce01447266c0773120b71d72a03a110d142277c4324330dee504d11fe46bf3b13ee94e8d3266dd27207ebae0da9559f7198165aa5d962272465dde32e68017341bc7a8baaa727c279db496bfa3427628aa4a2ac26300c117607d9e771c70408c9a1fc8fc01d6a7c4e53374e249f0d77d93d8f5e065981e2001e8d3eb6e7db05547abb747b7c405de291f383a048bf15e5ab07527ea8cf32aa96980494b8c540ec04fa2f498d469afda8dcf289521a459e532054e62aa42a97f912627449ef20f30e6ca203fc3d2a84eb115898744e65790253d5b2813e5c7b8b27ab17c7562964baa46589a46868eb79491d7309eb2a87958619825d4a0971d34962fc48ad762e0fbc0e0f3217d88950199c4e4c00322509f9a1d03f2f375b1ec77190df881ea468c62baa4ec4caba3302e5442157a63596e723f04fb40b6b1e6740e2af48820f0b53ebe9031f2ec6b59810ee5abb6ae2d1ce2372eba86db69e313ff7a6f17d15b8ddc2170c24bdb065dd6baf0edc38f41e37473a66e4dbc4b1ffde72f5450716bd88c5992f0a61953234965ec5d1e031df13cdefabdcf89b6521996dd1b1392813dd4c845a939dc6e629e72f967e7d0bcdd0f1af46335a581f8bad4146f48907c36cee6d7a9c449f122c56956768f2a5658506bba553683724a7c36fa9d5f3ae9064f9a67ad964c2d8442f3812aed7ce0941a11309f80c69d478beb9c8c88332693645bbfce9987e61ca2fd008bb5f5296c842d80b367c0dc49da3ebcc8b7c2cbfebc656e546c0bd9b9422d4c49f13cfc8152958ae75a03174d693eb4d5df1a45a0ac12481053b7874b08b6701e85c4f058cba81cbae4ff8bd426f625ee2884bf719f490795fba7927765c4299b6c2c03c3521e74a19130dfe76dbb26f4aef2689060a6ea83956e2af600c87c894b79f2d172d9ffb572ec7731662ff5f38129dac6bbe75176e56d3e4d01bcd94343bdecac0047d916b09a5a0cd9bae339f481e085c900f1ac282ae8f6eb04c4fbecdc697227247ee5c9d632c50e33d716cbd6d60d90182fc0235f92aa7480b2ebfba9fb6e3e2a175ad83fb5bddd8e7fd539bdcc9388a2e59a4f6b445c60210d30d66d652be1d705f26809291c43f78c028af6dbe38cb3f1635bb671e1d36183a32047f80959e489441c24ce546abea2aee04cd742e9fcec01760197b914a9cd677e5862b748c1e6f8b760fc1d6add31578176b0c149ced98a4379f115990bb629107914498e933bfb1bad94098063bcab75b2b8667df6fab15d3460fe3bbfd09157f860eacf75a23b4a4744af043bccf4aa3c3f3180130bf2a1de45f8304bdbaca1be46bcfddaa1e8524f40523c8c2bf1249f4bb8cd811a24e1b6f820c7daa8b6b9367554f97f7f3f68634ad6de0a59256d58b4e5cbba2524ff2cf97c3afa90e529e9d802ec9ad5ff49e9a1ac4151abc68e7ce7c03673c3513736925420c6f667a5e68adbbe8d062b4fc163ff20748055c152a42412b980ca3c692bfe759a6e0b2ce14f2c5f470927e6ce00ee18ddfee2de194e3793b1921f9039a90147ebe9902bd0d0e1541a9c7cc803492394a13645aa94ebd712f8908070ad8daf1a6b58e74caad344eeda72315b2fc3db4455d46dfbec77d0aeece7a7f6f566e636dcbdbdd872341b0bf8ee54b46471da2ce085afabada91cfd1785f5e2d1824d55844a42c99a94fae9acdde0e22da26cee563a0421512fd60605709d8fe4b6a6166617982d28529dc73232ab55b19e65ebeecf47a921d6e60be3f3049d93694baf5a93a4af602a37cfcb6f9801765e5fac20fe221ef4a083fa4e01bb6c7836b3691aa4ef846b18e8181f8a73fb81437c0f1400eae9866c43eca0393e5628b85f03e5706d223ac4cb58919f4a906f3e3a225cb139e1f2feef448f173c778978757edbb9fa8cc9777c51bb1c6a5f45e7769fb7c1134df864599449a4dbe80c6fa944a1e21ca31fc0cdae18eaf88999c9c196967dd3de189e6ff8d04dcdf7cd11a73cd80904b5e3f5d1c5383103ccb549d194d97b9dfabfc51e07e80a64565c1d8683ea5803f81e54e1dee4004d56eefeed1a96dbcbc98a5bdeb9b327216ae3334b78a48f5a8d45aabe7931f08c4b13fe4719d3119d4ad59ed094c1f38fefc6afca15bc8027401a0ca65bae1f3d4be2327d776c4f3dd0de91aa4acbbe1166577e9eab77ddafd055b1ae6e9c2653faacda733f850bc97ed023e66922346c3ae3b20b46a7caca216eeb65c35bef91a1910f96696d1addb5e71090757db69e7799eb6924c331db23ba05db7a1a8e51262925c9d71aa238676499bdf0150c43a0e19a184d861f66f9d8c422e6aa64f49d4c0b802dd4f7b36f4743d3872ee32761b5984f6c04a19ac52d44edb701f8349bf8bb3a753bbae71e042b89936747d13d75c681bd8e79a76edba119389464c267af8fb237ca3ff2a8e3e577da6f6480ead48e0958638e28769ccf4aa93be482513ebe87a15d127b46f526599b60e9f771a1fa2513c790ea1f8ee09ac98316b7f461a0dcbaab6c3bc4f92709cde1a4021ece3f9801c1bf08d875d97b4728bc903f18b45cf4d57c0ef1003bc7a3df29a648b152f0d9571d38f1c16dfb289bcd8a1dc9499dfa15ff73ebf844f749b6508d250adcaee0fd01ba3de01ed05be515c814c5e9879a12e540dfc44df0298bc5ead95cec9ed47c0a26a3805ca1cd7a98f7d4e46da93c4e7108ed562ca0c31fd8bb1d55ab0f759e4229fe34129c65267973869fefca9c1d3e839db40c897cce4e7fbe147e2a063f3647a085807d34afc1971724ec56497e91b79fd3353562dd604cced748c45429d6e30269b19380c567fe2aa4a6149fc6476c31050cc82af709ec4f62e5fb6faa51c86f3cd6fb81dc64a6bccb739f0e9f559ba9d4acf882c3e77d1401f824c702af544a29eb05edde2f0ae10dbb4a2edd9d78933444932e7e4a278372643d01743ff954abbeb4f9946b74ca37086cd3faf4680e809202cd2c2bbd50cd936f4a8a3d4f9df8ae90a568f3ac6f6788541b202ae298df9a69ac09f68c1f8364850f67b2b5a69172ac8c4fdfc097a3d02c13e04578f6c766c5d3f1e6c3db86ffb4510718a267d8bbe00ca2b17a5c1cfc046c906c08010ed4981a1bc4e10d71f9148dcdf8524d939f86a3fb1f64a8e3de5544a8779dac4a43709240f36288b14d39ec68e59b9063f61bdfd7d20d98da5766a95bed463a564d38c263ecc9a3b2e4022941611c8975f2b3ca232ba5e4fa9d6b371a816fcc9ab66a52c9ada22c735d312d7846c4674afdd58ce7965f1c93c43feef6f558483f91c575525f09ef7f0713bdacf60415527efdcf12f09b6641fa058a13ff76fe7af55a15e39bed26c45c2c3464d503f6ff2b6b95e3d4101ef1aa4e0aa6b60248c4f26c72497b026a9f0f8a25ca38f358624ae18258aa3594d3d0596a8b66b3c5e259168bb5f61881eaa4b9733119474a64b28f61a18c049d2514f9ca508af4aaacc005965d3fe68538cbdcf17e4aa9e82fef208d2fd3d9b6f7099337631ec8268b83b90279e5f8c18572b2c15edf1b1e08fc00fb2b38c856e66a79885d61d2f1bd04c93bb892ef5343d9dd04eb75db7a4cf2a25f3be77369937d802f57c4fed0860f6f721892d9ba5324a3aa6d5231f54d07fb0a1450c4c708c996bfcf3fd6a79c8050b2fd34652655681869c5ea07c1f9c3228add4089be8593a6ea05193719221a99e4c90f400e5c3d59bfdbdc6ea3c56687267a9a48a8aa636acb99f07ed893f7ae3f7d50f82217166140ba0b003c23cae03aa1445c0025e92e67b342dc37acf5795fdc802da80900e1cd9a84cb6f749752bae73ac05f9a5778a4679927d7ec777fbb8d5edcd230846f74079018fd494d657e9a099f4e0d8cd70d1c60d37972998b3a83abf35d1b8c090afa28c56999381008d23a7dac91a196a316c7d5e284cec002d1ff145f569abb70910fd9abbd9d017bed22ef0c5f48466d70e386ea4ee50cce142cf4e562b80b4e17ba1282701ca36a917d4bbd98a8795c120b0e7c38cdaa4bfd86d9860442a60f955ac03a9db8503884fadd3f8dcc0174570c145e0f22859667a6f44ca297bce84b2192bd0bd5e4cd006ee43a9bb77474414ba8f96a3fc940d41cb6bc05eb90d3025e57c9c6697485d5dc6d9be64705684602433fcde9303289bb23db0739a6db6dc7682ea6aab49c5077f66fa21e8af5cd01833654cead3646d45184bbb68bdd897b8026f3580d538fad7dce7c7e9f163a09e8edffa5cfbee9ac743e4d97a2a1461fc945c4541be3e4b940c73d64e69471adeeb7b2bfb3c5fefacc68414b24c7cc5e124aa51430618ed69c496440651bfb95aa766bb3336eabc3a817c82c39c4b81acbb6d97f623ca1fdd3fbeef5ef7e6cefd09e16391f1d409a3ed1305b79c82b3d29077849b8d584c5edcfe08dcb0361684c7d4f56e408cb745e11196ad0fcea32866140a181c17ddb0097ba22b714bd49f228bc6b57fd6fea29475f3f61e1d68330e6015539eda198e3cf85ac9b5012e8f5f44a272c61ca3af2c3040ea0cb425dc43d02e0641d831369b96eae13bbe494d08a49409f7d9ba07642ad0bce66d22ba548acebf527c09f8d0bf8167215ce0844241e91978ab487cf84e4ddcf49213a360ca8dfd060f345ac9a177bff55e41247663b4db3f874026149c81f3281193d0d634f056aab00bf4a56bfb9ff9c50e4260ec224cfbdb06ba8ccddd3c46cbc1482e3c3d121dd783b11b5a4af3956259b943e4054b9e5d8954aef77f7f0d997324969c63631e157be36d082c6fe9090012fadd6384c8ac4a915346aac0e6c033b13fa1a50d2d13baa70ad596fd841d0711cc5465d7fa5ee72b0734fc570dececfdc62356fd5f97aaba7c1ffc89b73ecd4ff69a3aba137648b1ef8022bac30aad32393acaa5fa16c976a809f1572f7c766bbd36f9886dbc477501c412b966edd8751dc603e0dafec7fdb020a21701fa27b250f88662cc934775b82e788f9847425c21a9d93276d572213a5dbea46155b747a03e5e9126a1c2710b3d3be575d1d4c40fe10efda14606a7203585314ff929c636221fc4bb17f5243f61d4b877917e11b2956cf785f5b3e2a154b6cf9fe7694f2829983801b79ec796f4d47407f75eed168826c489e9f295c78546e8c628785e9fc2989fc30ec2416782bb78ebaeea24bc4b20699db6150e28984cfb809f1adb18fbd5dcf7ea4d3c248d99324806c9c27e644a88a1193c26eaf692f33edbe9f6de2ab448d1683b98cd82d6990b6b105ec77a36c81260d525b0f75dd3f1da8f75072fa90b31b15caa883eb60026d2a4dc80c84e169f4a6d50f1a3f083043a8cfa01e47b83b7d8a15c73a416c035692e3612664b253de522846d12f82d90c7d7a1a1c41ba04e19859f527b47ca588632fb18cf45a06a58d85e08f61f77a4bf1fdd68a4ea06d75b4d6ad2f0f26b9e72b37e5104e17240c40fc5e4c1c9f6145715c0529baee5a3cd72ab30ef31ab61b38bc91ab6279e48351268680eb3cad3481cd550cb64654bc90f073149786ef959f94f9390184250ce0268ad6221b43efaf14a11de971c45a370a2db06d592c742e84917550ef2b37b9b68966e802f95a2c00da784afe8e62a6deb1d6976a08db1008093418dd35e4d4ba8a0f9f2bfa20c7d0b3c2afffe755cf1296b5ab84393248bce17ac3cd71eec5966801e3b3b1d2de47131e59f487587767485edfbfe6ff037531e57e1db1b61921d7b702dceff03b925d14d205f9b8697110490ccbb383ef911dc6b6a16b617902da843d27747cef1ef311157b25cb1cdd9231aaf86647d343ca36c85c4059f59fe8a7508f466c6240476d867ae06883ac7f45c50613e56b337692cce24ba15efad08ef93920119fb2b0879474d3f0ba61da5a4f3299ca80d2cb65fc905ab5271303db67ac86723203071b354d45945f342c9821a9845bc0ba3df7ed61c12f88512f692d5757a30911072af8e0fa95142315c6be38726f390d696cd4938d2d9bf357064513cc90510a0422be150e1218fb22a5b71de6e8c313a565c939cb48a6b1ac1b75638e3ae00a4caec8834c16c297df319508441e7f063d67c6e4062b1ad606b18e039da59e7167dd3a0b34356f95f9f52093939106180a0071533bf71ab47086263bd96c7b4004085779bc813c2186b5f44f84aecab71b78027f7fcca02be7d149db4c0f17835201ef03c9ca6fbcca3a1353d5d94fc366bc2fda593280ca7daec8ae12815f854fc84cc1c3e40b4412850baec19331413fb4d19b2a51769af14c51b98e9bb8575d0a066a060f9bc44202f22183a1ba2713453259599690bd70392782fef5b7c5e3f8e6379ea84a3b602273e372805f9acc7994dd745bbb9ab401035b6d042c9e0a1fa329502e2e0f17ee9d34b96c255a3305b6e311fe4893d144c10afd860d74218ee78d83f252d4620964a1d7bccf718fad9df3baf5dd5bfec7448e52601f598e78665546ad09ccbc9e1b96debdada7a570ba6ff018fff9a589111ab45b71b9daa9f068a8fb09a16a1c1a6f6e22296ccad7d5d968821794236a79a62262e5edc5756c99c7e733e88ab78120da5f844968d02fa0b9e2fc3763dd16f354117b9ce848c21992b2b391137a7a8c31f2226d4c0669a8334ce6d5d85fac701bb0b23452453ff766373f18dc9c44b80151ef728e256656b40baf747b9292489de5e20184a9c022c1ed330003454f4b686a393e68b0db21e8fd931aca596ba3f51243101250fe78de2ebd95f4f333ad25edd6f80406a00dee774121da8f8b23b6eb7f2c657852fc777122753bf2fe4566ce403b6c0ef0b8bd0c53823d9f60bc44d0ddd6ac788e8888df28f322ad0fb6fd9b6d88b6530be372d29050d2f1b1e8273fb7a1ca6395c882090422af5ca6f803877f172fa3e3bba15facb5bcef8fa89a5e3c661b835b11e02b19f6d5c872bdc4917913458c5972b4e2cd3aaa08cb2ec668c0ec2692eb53d61988f63c8460aa945a2975ad59abfe00ad67242739b653e8ad422675a37026396f6e7d9bdc9f311ee667ddbc64c4afb4166316ea167780c718d541846d29202113b869ae8ef66811edb958cda474195542b7a0becbe351ccc7ef78f6b572af15e431b59fc5f82d47265372c4f3fc18da44c9aee246bcc248de3533f20a60b61d8a4b8324dca11ec571028271a7d1bc83183e92be5385ed4b2e94343452468f50f747c3a4b172e34c947b9a40415602d44469dcf426087ccb2a3977a8698c5c1190e1a84f70366b544c89fab78146b7b6daace5676067a48e00fb90a6073167be04341ebf2181575559cfbc03a9871617cd7718ce1a46c52dd3faf79babd1a01fbeaf89d8b59fa9dc6400766cd102db6cd6132e8f5daf25061614042f9dc254f91a4ed14031992476021a0cfe5b7cd8a8410391d80572c19404c43d5328fe9c96e7feedde6b3741d04b524e11a41dd3131d5b2c36b5824a899d7aa1918fce06dc08d3cb2b29581553ff352b8f606db5fbfcca1a154c4613de096ab5c7f4eb6250096d964b270ebe242850c359686114b1bcfeb715c7154f04a772973c41ca9399b61841d7fdaeee47745cfce51f842f7cf412022d006567f58fb49dfb3eba342191ea6ed037d32e6a92123d7e58777ad352c2bc27da93ed46c378ff631a7dce38d94fd8d865b5ce62de4c67af96bfee74018671be2fedd63823306c3492320fe530b099b5cdd144608b6cb14aa79f5482b01f828b8aadb6e98415daea029984e470f8b28b2655b2ac753d33b8035963b4a5c00bb0cfda3372b2782590596d6d03c237e95a4ab347531d2819c9ac9ba37f642298f6a999fdaaa13778e10d07e3fc9c1387a0a76016a4b30317fb3d8ddeb4433d0b04d17d30c29615aacf0f8697255a6a55e6b47d64fa45d7171a8ca4af78b32047acb2b7c5c70969e530828882287a16ad460c3f372cce00404ba06b2fe64166d70dcb4f6bb636fd53a267be9a13beb9a1d8253dbc9e49028981f7479488eb40ccb58cfa1c0c9fd61437ef0e84f51ed5f788d8e9595e5955faa744c700d6677bfe3c5e52f0ecf70270b9e62610d5cbd53b2321033a7aa3bd70ad8a9506545f0da4cfce3aac6e9a03051ad703a0f564685ef2b1e5f203637edd5c30ba505f81666012e2cae3b3a815d33ae97b0767e8b48f3d42272f9d326e8bcf176f852a8aeb0603a11fe12b5e04c3c5ab4cab621eedfb5e86436661bb279459e3d874ba0fba92e55fcc763cb8b732b5cd9286e8f3147d3cadf5f342dc9313f64bd83ed828fc426b69761179ce732a3009194b8777a10eb2d3f4881129478b994e55abaf73965d62d846b8c4976f91d009b73738ca1c81f055e0936aeb527cb4002daa96ddd8cefe2e390bb5f90eca8e6d6997ade6819be3b44b2e346d533f7ca8f3c031f3c5ebbe9e17ee00d0e0823c61d850c6fea943fbdb4caa6539e3f7903e05a304e7cdf24b989908ba2f41b8bf67cec6a83ebdddeca2ec954e70c7816d8241d703b8109029869f3cb58c62e1e7c9fee329af5a3ec5d8a12db1f00fb579fad7ff18fe5a72bf1b185f52cdae932df12744b5eb24a0c3e4e5706c880f5f6b64ffdf6b71a17985fc4d2cea77860196f378ccf5b2b235b93b0278fb69fc7f460f21472cb90ec54d16d168a5caf2337d63b8ebf11012568d2ea0d92e91e83cd6cbbc88afba1097a84cd1af3948a2388891225237b30b4704d2fefb6bc7bf6adf6dd86b7a65c511637d96a3397096217c3a9743050133bf836b8333519d001947230cd25ade2e2e4e9b8a1227ae4283b2052b2c3a58a11bf7edc534bc11113c329791cea22dc5b71f3b4702d1529d965f4ed81951ce99a61779452751bca8d3a0070c47b1f8fb636ae6bef93514950f607c1746f5d9afa96902effd960b770a26aedad55aa5ad869d18c98e24b470c99b901badbaee298d93c2458303104e5c2dc3077b93c39ff46f0e81440a6f9d2a267f05f533c3c0943b6bfe50906944d2325143d84e5c12d528841ec611014d2768b116992fe1483c1764467eab1446b14adce8e366ec1615f7ad0fcc272355ade823771ea79db57f2dfba3335a50dd0c1c6105ec51f245e096c1492ba4230a752871e4c16e8ee301bf5960e97fdc948c7d54697f7c01439f18f97cfd01c4b74022607e9459fbdcd10243239b4b7f29dbc217a0caafc0b613e43e9689dc1bb2e135e9deca88bebfc61cffdea1ee33df41967cf96ef72a9d87c45084fb105077273109aeba2e3384ef27b604f356984401a8643c493acbc56e3780f0f0ce868db37c0f0f91d403e99951e9c33ec808ac1107a133109588e065162ccb0fa254c8fdc3fc89bfba51a17c975ba3cfc4d1f0faac685619bd5453ea2acaa8a3dcf34b2cac31447d77a89ad8adc9b1c0c620b6b72230a02f978a5407572fc3994c59b764b27221aece8b8ce9faed1d6c442672c102d7f2d28059173b6b6b188dbad05273ff852e0b9f14380f2ba94a34859092407449b9118a7d54201890c216a4720001f026306a9f8e57d0bdb9c29b9eea019e0bdef92e5e6a93852dd3e26cd3eda7a27cf479e88dab17bae6d339f2519b76824f1e5549304dd01333b393082274655b8c3dc00e602aea10f35793d6882069ce5a4debf9884c51d38aa1d83c91a92c0606d38076a1dbd7bd4c0cc5ad01dfb2b04b0dcdb1cfa9cb08c498ec9481559f0b5fdfca94ef3f2f07de6b541ccc5b287904d0344ba8b5b51c535644e8d459d15166c3af4bf36cfdccfd1ac83ebf540d61db77069f13152f27f17757d68536fa52473dee6b1db107f7c9aca2d6a98ab5e537b9fdc5625e7febe87c2127dbe140a94018dd26a640fd42a769bba8e6ffa284d5435d6c57a1f950933a6f6b45d2c7faf19ae2e8f2d2a96b946f1f6d2aeb335aeee909a746a5944f7dcd85f9cef487e9b182ed90cc03d9b170c1173cbdb0e9c40382e0cbdac38bbe8c3ffeee255c009f0423efc3d8135f9f7c949d12d4b700d2aff5bd3c0fa3c9f30a6054959b4f609c2ec8e235f5652d6416be3d13abcb84fe2db79e304757ffcbfbe286a1c8b4c0f8aa19d846608f6fd7f8a34acad860a73588593eb1cf7cc6f3586356747d43726982a38a527f3d94dcc25849ab71286b89c5a30cea07b8cb255dfe1b86b54d077960db18eaa30cae8101b4a61fef2147f1f38a5e83e40e262e2484bc552b728879d1c169a81713db17379c4bf5f9dcdbfd0196228a7afa3b181d401d98ac322c5ec619b0d504e28aa71a450b259c0c89fa2ba1ba7a7356da009b58085bb6e25fe5cd0097d822d39f9f3c9b39da1041c58ac1a4556de9d34f452c995ec21d1034e959218e8fe002d2b757c674848eb7ac84e8bd457a312c4378303ebb3184d4c90108e0604cca678487bcdd0be37facdd7c6b17e740a098fa4b38091b10f1536df1f297902bdb5f02d69f25e4e84d3f4700070f63189440a2a39b9bab6d4f3dbc23634867aeeca99dba4aec39ee94e701ccb77ead02aed1012f7eaa84eb44ad3e625d5619aec5ef76172213ab1d66680d42872e8ce8846e057329fe5937757e3ca7c1be1f3db31305f48978a178a043eb8d4a060d125dcc202e6d8c75205fdb2e42b0b0d215e768c73832d58ecceca993f7d5cca8c3ea340a8c1e722b806c865ed1380a1cd83b8b5e93ad4e2ea1d66cc7979fbac5fa26a2bf881b6db305bb60eb05a39edafbbed715e6aee84245b1cf950a2cb69dd631d95365e1c731ba5756b2ae1fdba6384cea97d7d74f9be62cb83fa7ea1287b6f26eb6f24532c6dad7f7869eff58b8a3448a5a6b0c4f45d8c1eb277174e3636aff670d8f169e040a445dce4b33f6c33b3be3e01", 0x2000, &(0x7f0000001480)={&(0x7f0000000100)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file1/../file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x803e}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000008800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90}, 0x0, 0x0, 0x0, 0x0}) 18:17:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x7, 0x1f}, {0xffa6, 0x101}, {0xffd, 0x4}, {0x1, 0x9}, {0x66b0, 0x1f}, {0x8, 0x6}, {0x8, 0x3}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) (async) r6 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000300)) r8 = openat(r6, &(0x7f00000001c0)='./file0\x00', 0x800, 0x44) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000200)) (async) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000180)=0x4) 18:17:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) 18:17:48 executing program 5: socket$inet(0x2, 0x0, 0x6bca) 18:17:48 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xae42, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x0, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0xb, 0x6, 0x207, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 18:17:49 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f000000eb80)={@map=0x1, 0xffffffffffffffff, 0x0, 0xe}, 0x14) 18:17:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 18:17:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1, 0x23e8, 0x1ff, 0x7, 0x1, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r6, &(0x7f0000000200)=@random={'security.', '/dev/ptmx\x00'}, &(0x7f0000000240)=""/149, 0x95) r7 = syz_open_pts(r3, 0x9a443) r8 = dup3(r7, r3, 0x0) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x8, 0x0, 0x0, 0x0, 0x5abc, &(0x7f0000000140)='veth1_to_bridge\x00', 0x7fffffff, 0x86db, 0x8000}) 18:17:49 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xae42, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xa7e9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @local, 0x0, 0x10}}) 18:17:49 executing program 5: openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 18:17:49 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 18:17:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000eb00)={0x18, 0x1, &(0x7f000000e8c0)=@raw=[@generic], &(0x7f000000e940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000eb00)={0x18, 0x1, &(0x7f000000e8c0)=@raw=[@exit], &(0x7f000000e940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000ea40), 0x8, 0x10, 0x0}, 0x80) 18:17:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x301}, 0x14}}, 0x0) 18:17:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x0, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) 18:17:50 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xae42, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:17:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4c06}]}, 0x1c}}, 0x0) 18:17:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1, 0x23e8, 0x1ff, 0x7, 0x1, 0x6}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) fgetxattr(r6, &(0x7f0000000200)=@random={'security.', '/dev/ptmx\x00'}, &(0x7f0000000240)=""/149, 0x95) (async, rerun: 32) r7 = syz_open_pts(r3, 0x9a443) (rerun: 32) r8 = dup3(r7, r3, 0x0) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x8, 0x0, 0x0, 0x0, 0x5abc, &(0x7f0000000140)='veth1_to_bridge\x00', 0x7fffffff, 0x86db, 0x8000}) 18:17:50 executing program 4: socket(0x0, 0x5, 0x0) 18:17:50 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r0) 18:17:50 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) 18:17:50 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000640)) pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480)={0x7a}, &(0x7f00000004c0)={0xe36a}, &(0x7f0000000500)={0x0, 0x3938700}, 0x0) 18:17:50 executing program 1: move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000080), &(0x7f00000000c0), 0x0) 18:17:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x6c6, 0x0, 0x0) 18:17:50 executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/bus/node', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/bus/clocksource', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) [ 669.953069][T22716] ptm ptm2: ldisc open failed (-12), clearing slot 2 18:17:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x0, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:50 executing program 5: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x74462, 0x0) 18:17:50 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 18:17:50 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @multicast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @random="a01c9fc35513", "", @local}}}}, 0x0) 18:17:50 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1, 0x23e8, 0x1ff, 0x7, 0x1, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r6, &(0x7f0000000200)=@random={'security.', '/dev/ptmx\x00'}, &(0x7f0000000240)=""/149, 0x95) r7 = syz_open_pts(r3, 0x9a443) r8 = dup3(r7, r3, 0x0) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x8, 0x0, 0x0, 0x0, 0x5abc, &(0x7f0000000140)='veth1_to_bridge\x00', 0x7fffffff, 0x86db, 0x8000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1, 0x23e8, 0x1ff, 0x7, 0x1, 0x6}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fgetxattr(r6, &(0x7f0000000200)=@random={'security.', '/dev/ptmx\x00'}, &(0x7f0000000240)=""/149, 0x95) (async) syz_open_pts(r3, 0x9a443) (async) dup3(r7, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x8, 0x0, 0x0, 0x0, 0x5abc, &(0x7f0000000140)='veth1_to_bridge\x00', 0x7fffffff, 0x86db, 0x8000}) (async) 18:17:51 executing program 1: bpf$PROG_LOAD(0xd, 0x0, 0x0) 18:17:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f0000000080)=@framed={{}, [@btf_id, @btf_id, @map_idx, @kfunc, @generic, @generic]}, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0xaa, &(0x7f0000000240)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:51 executing program 4: r0 = gettid() r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)={r3}) 18:17:51 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100)) 18:17:51 executing program 5: syz_clone(0x50040080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:17:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 18:17:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x0, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:51 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 18:17:51 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) 18:17:51 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080), 0xffffffffffffffd2) 18:17:51 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r3, 0x801) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x2001, 0x6, 0xd99, 0x1, 0x1e, "00400000000054e2c27400"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="660f75830088000065f3e1bb9a00000000770066ba4100b850000000efe0d48fc9189212b9ed0b0000b8b586c994ba000000000f30670f01def266f29cf33e670f32", 0x42}], 0x1, 0x5, &(0x7f0000000180)=[@efer={0x2, 0x8000}, @dstype0={0x6, 0xf}], 0x2) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x84, 0x2}]}}}], 0x10}, 0x0) 18:17:51 executing program 1: openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) 18:17:51 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 18:17:51 executing program 1: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x4}, 0x0, &(0x7f0000000400), 0x0) 18:17:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0xff98}}, 0x8044) 18:17:51 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_getoverrun(0x0) 18:17:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x0, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 18:17:52 executing program 5: socket$inet6(0xa, 0x0, 0xe48) 18:17:52 executing program 4: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x6) 18:17:52 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x0, 0x2}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r3, 0x801) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x2001, 0x6, 0xd99, 0x1, 0x1e, "00400000000054e2c27400"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f00000001c0)) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="660f75830088000065f3e1bb9a00000000770066ba4100b850000000efe0d48fc9189212b9ed0b0000b8b586c994ba000000000f30670f01def266f29cf33e670f32", 0x42}], 0x1, 0x5, &(0x7f0000000180)=[@efer={0x2, 0x8000}, @dstype0={0x6, 0xf}], 0x2) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:52 executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/bus/clocksource', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/bus/clocksource', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='.\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) 18:17:52 executing program 5: syslog(0x3, &(0x7f0000000000)=""/152, 0x98) 18:17:52 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff4000/0xb000)=nil) 18:17:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x181, &(0x7f0000000280)=[{&(0x7f0000001440)=""/4096, 0x20001380}], 0x1, 0x0) 18:17:52 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="e7") r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000002600), &(0x7f0000000240)=0x80) 18:17:52 executing program 0: unshare(0x40080) unshare(0x18000e00) unshare(0x64020100) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)=0x7) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x8, 0x7000000}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x0, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:53 executing program 0: unshare(0x40080) (async) unshare(0x18000e00) (async) unshare(0x64020100) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)=0x7) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x8, 0x7000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:53 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, r0+60000000}}, 0x0) timer_gettime(0x0, &(0x7f00000003c0)) 18:17:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x11, 0x5, &(0x7f0000000e80)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000f00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000f40)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x800}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 18:17:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r3, 0x801) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x2001, 0x6, 0xd99, 0x1, 0x1e, "00400000000054e2c27400"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f00000001c0)) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="660f75830088000065f3e1bb9a00000000770066ba4100b850000000efe0d48fc9189212b9ed0b0000b8b586c994ba000000000f30670f01def266f29cf33e670f32", 0x42}], 0x1, 0x5, &(0x7f0000000180)=[@efer={0x2, 0x8000}, @dstype0={0x6, 0xf}], 0x2) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:53 executing program 0: unshare(0x40080) (async) unshare(0x18000e00) unshare(0x64020100) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)=0x7) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) r2 = dup(r1) (rerun: 32) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x0, {0x8, 0x7000000}}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='1', 0x1) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) 18:17:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', 0x0}) 18:17:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000240), 0x4) 18:17:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x0, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:54 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0xa137, 0x8}, {0x9, 0x3ff}, {0xffb9, 0x8}, {0x3, 0x8}]}) 18:17:54 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001640), 0x8) 18:17:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0}) 18:17:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 18:17:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) 18:17:54 executing program 5: syz_emit_ethernet(0x11, &(0x7f0000000000)={@local, @empty, @void, {@llc={0x4, {@llc={0x0, 0x0, "1e"}}}}}, 0x0) 18:17:54 executing program 5: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 18:17:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xcb, 0x44b4, 0x0, @mcast1, @remote, 0x7, 0x8000, 0xfffffffd, 0x10000}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180)="c822c6e02af731611e4251473dbd5679bf6bc608", &(0x7f0000000200)=@tcp=r2, 0x4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x29, 0x2, 0x40, 0x7ca, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x80, 0x69, 0x3}}) 18:17:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 18:17:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000a000}, 0xc) 18:17:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x0, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:57 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 32) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:17:57 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x3}, 0x8) 18:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4000001) 18:17:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 18:17:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0xa137, 0x8}, {0x9, 0x3ff}, {0xffb9, 0x8}, {0x3, 0x8}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0xa137, 0x8}, {0x9, 0x3ff}, {0xffb9, 0x8}, {0x3, 0x8}]}) (async) 18:17:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0x0, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000003580)={'syztnl2\x00', 0x0}) 18:17:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x3, &(0x7f0000000000)=@raw=[@generic, @exit, @ldst={0x1}], &(0x7f0000000040)='GPL\x00', 0x6, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:17:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 18:17:57 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "64e6579d69f39fc8b9e9c2f1255a4d8f194c2ee541de139f22e589cd9e1ef3d36d19c1459b2d2afc3cc63fa503a162135f84953e564b9fed978975dea51fbd5c"}, 0x48, 0xfffffffffffffffb) 18:17:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, 0x0) 18:17:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, 0x0) 18:17:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc020660b, 0x0) 18:17:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'wlan0\x00', 'vlan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "cfd0"}}, @common=@mh={{0x28}, {"c5f9"}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'virt_wifi0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 18:17:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0xa137, 0x8}, {0x9, 0x3ff}, {0xffb9, 0x8}, {0x3, 0x8}]}) 18:17:57 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:17:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, &(0x7f0000000240)={'wg1\x00'}) [ 677.146260][T22947] x_tables: duplicate underflow at hook 2 18:17:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0x0, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0) 18:17:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="120000006d7f23"], 0x14}}, 0x0) 18:17:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 18:17:58 executing program 1: syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x161002) 18:17:58 executing program 4: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf4ad) socket$nl_generic(0x10, 0x3, 0x10) 18:17:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, 0x0) 18:17:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x1c}}, 0x0) 18:17:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffff5}, 0x28) 18:17:58 executing program 1: bpf$OBJ_GET_PROG(0x4, 0x0, 0x700) 18:17:58 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 18:17:58 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xb) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9cd) 18:17:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0x0, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8993, &(0x7f0000000240)={'wg1\x00'}) 18:17:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$TCXONC(r5, 0x540a, 0x1) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:17:59 executing program 4: socketpair(0x28, 0x0, 0x80, &(0x7f00000001c0)) 18:17:59 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000004cc0)={0x40800100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:17:59 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xb) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9cd) 18:17:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) 18:17:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000200), 0x10) 18:17:59 executing program 4: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x20, 0x0) 18:17:59 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) 18:17:59 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 18:17:59 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) [ 679.147385][ T8990] usb 5-1: new high-speed USB device number 40 using dummy_hcd 18:17:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x0, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:17:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$TCXONC(r5, 0x540a, 0x1) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async) ioctl$TCXONC(r5, 0x540a, 0x1) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:17:59 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) 18:17:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 18:17:59 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) [ 679.397426][ T8990] usb 5-1: Using ep0 maxpacket: 8 18:18:00 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xb) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9cd) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xb) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40000) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x9cd) (async) 18:18:00 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000004080)='ns/time\x00') 18:18:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80605414, 0x0) 18:18:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8936, 0x0) [ 679.517540][ T8990] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 18:18:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) [ 679.728303][ T8990] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.747238][ T8990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.761954][ T8990] usb 5-1: Product: syz [ 679.766596][ T8990] usb 5-1: Manufacturer: syz [ 679.772282][ T8990] usb 5-1: SerialNumber: syz [ 679.819412][T23035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 679.839543][ T8990] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 680.057375][ T8990] usb 5-1: USB disconnect, device number 40 18:18:01 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x145200, 0x0) 18:18:01 executing program 5: bpf$OBJ_GET_PROG(0x4, 0x0, 0x0) 18:18:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$TCXONC(r5, 0x540a, 0x1) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async) ioctl$TCXONC(r5, 0x540a, 0x1) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) 18:18:01 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000003380)=[{{&(0x7f0000001c80)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 18:18:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x0, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:01 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='l', 0x1, r1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 18:18:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8924, &(0x7f0000000240)={'wg1\x00'}) 18:18:01 executing program 1: mount$fuseblk(0x0, &(0x7f0000000380)='.\x00', 0x0, 0x0, 0x0) 18:18:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000840)=""/67, 0x43) 18:18:01 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002180)={&(0x7f0000002080), 0xc, &(0x7f00000020c0)={&(0x7f0000002e00)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x0) 18:18:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000002c0)) [ 680.758671][T23104] trusted_key: encrypted_key: insufficient parameters specified [ 680.834996][T23113] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:18:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x20}]}) 18:18:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8911, &(0x7f0000000240)={'wg1\x00'}) 18:18:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x400040) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x2) 18:18:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) 18:18:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x0, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:04 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0xa2f}, 0x0) 18:18:04 executing program 4: futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0) 18:18:04 executing program 1: bpf$OBJ_GET_PROG(0xd, 0x0, 0x0) 18:18:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0x400040) (rerun: 64) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$TCSBRK(r3, 0x5409, 0x2) 18:18:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200000d000003"], &(0x7f00000005c0)=""/223, 0x36, 0xdf, 0x1}, 0x20) 18:18:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000000c0)) 18:18:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) 18:18:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8936, &(0x7f0000000240)={'wg1\x00'}) 18:18:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x82, 0x4) 18:18:04 executing program 4: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000), 0x10) 18:18:04 executing program 0: unshare(0x40000000) (async, rerun: 32) unshare(0x18000e00) (rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) 18:18:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x0, 0x5, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 18:18:04 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'wg0\x00', 0xfffffffe}) [ 684.014540][T23166] wg0: mtu less than device minimum 18:18:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x400040) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$TCSBRK(r3, 0x5409, 0x2) 18:18:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89a1, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 18:18:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffff9a, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}}, 0x0) 18:18:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0xc020660b, 0x0) 18:18:05 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4080c0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000040)=0x1) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="66b9430900290f32260f01cb0f01d836650f017d0e0f00dd153a00f39cf0f755e06287000066b90c08000066b80000008066ba000020000f30", 0x39}], 0xaaaaab1, 0x0, 0x0, 0x0) 18:18:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8940, 0x0) 18:18:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 18:18:05 executing program 5: syz_emit_ethernet(0x1042, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff2b3a28a23caa08004b191034006600000002"], 0x0) 18:18:05 executing program 4: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xe13ecfbfdadc693e) 18:18:05 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffff7f}}, 0x0) 18:18:05 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) 18:18:05 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4080c0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001400)='b', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 18:18:05 executing program 1: bpf$LINK_GET_NEXT_ID(0x6, 0x0, 0x0) 18:18:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000040)=0x1) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="66b9430900290f32260f01cb0f01d836650f017d0e0f00dd153a00f39cf0f755e06287000066b90c08000066b80000008066ba000020000f30", 0x39}], 0xaaaaab1, 0x0, 0x0, 0x0) 18:18:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x3, &(0x7f0000000840)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x4020940d, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 18:18:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "f2fa150f8932336d86cb8b429f94e05479b68fb7c03cc4dacfca03ce61abdefe8eb69ced35389e908417e3a8b99deaa4086500253473d478712a4e3c85cf3c75", "e9e62a995f19012b81109fe31c6ee36b8ce56396ac12bc2531b17992cbf07d4f"}) 18:18:05 executing program 1: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) 18:18:06 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 18:18:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xea4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe8d, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0xec4}}, 0x8000) 18:18:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000040)=0x1) (async, rerun: 64) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="66b9430900290f32260f01cb0f01d836650f017d0e0f00dd153a00f39cf0f755e06287000066b90c08000066b80000008066ba000020000f30", 0x39}], 0xaaaaab1, 0x0, 0x0, 0x0) (rerun: 64) [ 685.470395][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.477042][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 18:18:06 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4080c0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4080c0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:18:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7}}) 18:18:06 executing program 5: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) 18:18:06 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000140)=r6) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:18:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x0, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:06 executing program 1: socket(0x1d, 0x80000, 0x3) 18:18:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x11f52a255b4d140f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}]}, 0x34}}, 0x0) 18:18:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 18:18:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f80)={'sit0\x00', 0x0}) 18:18:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 18:18:07 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000140)=r6) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) syz_open_pts(r3, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) (async) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000140)=r6) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) [ 686.471405][T23263] can: request_module (can-proto-3) failed. 18:18:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000064c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000006600)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x30}}], 0x1, 0x0) 18:18:07 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xac000, 0x0) 18:18:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005b40)=[{{&(0x7f0000002ec0)=@abs, 0x6e, 0x0}}], 0x1, 0x1) 18:18:07 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:07 executing program 4: r0 = epoll_create1(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)) 18:18:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x0, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:07 executing program 5: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x11, 0xd, 0x0, 0x300) 18:18:07 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) (async) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000140)=r6) (async) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:18:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000540001000000000000000000070000001602"], 0x18}}, 0x0) 18:18:07 executing program 4: syz_clone(0x49802000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:18:07 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:07 executing program 5: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x2, 0x0) 18:18:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x2a, 0x1}, 0x18}}, 0x0) 18:18:07 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x88, 0xd, 0x0, 0x0) 18:18:07 executing program 5: add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='d', 0x1, 0xfffffffffffffffc) 18:18:07 executing program 5: syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000880), {0xf}, &(0x7f00000008c0)=""/13, 0xd, &(0x7f0000000900)=""/133, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 18:18:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:18:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x0, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:08 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') 18:18:08 executing program 4: semtimedop(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x3938700}) 18:18:08 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) 18:18:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:18:08 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4041) 18:18:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7d08b9af30bd448156f0efa8256d2e5c3f37dbb787e3a8621151bba32f65267c8ea1915fd5f3ceef05d4dd15383ad56ff8b2d71dfce24fc37927e6e148c15e56", "7fe4f8bc97870f5341bab2cf06242a8284ad0413f42d780a4c529abaf01aada8bf47250fd005cb3d78886d2281778f900027998d222fa892a5e9a195db7eb223", "5cf2cd724601000000008800"}}) 18:18:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r1 = epoll_create(0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x20000010}) [ 688.143407][T23377] loop0: detected capacity change from 0 to 3807 18:18:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f000000db80)={&(0x7f000000d7c0)=@abs, 0x6e, 0x0}, 0x0) 18:18:08 executing program 1: add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="ba", 0x1, 0xffffffffffffffff) 18:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) [ 688.261252][T23381] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:18:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x0, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x16, 0x1}, 0x18}}, 0x0) 18:18:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:18:09 executing program 5: r0 = getpgrp(0x0) ptrace$poke(0xffffffffffffffff, r0, 0x0, 0x0) 18:18:09 executing program 5: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff]) 18:18:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000011c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x401, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x613e9923, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 18:18:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000110001"], 0x18}}, 0x0) 18:18:12 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x42100, 0x0) 18:18:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x210440, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="652e0f32ba4000ec0f01c2ce66b9010200000f320f607291360f0866b95403000066b87f3d880766ba000000000f30b800088ee036260f01d1", 0x39}], 0x1, 0x1, &(0x7f00000001c0), 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/nd', 0x400000, 0x8a) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_open_pts(r3, 0x0) r9 = dup3(r8, r3, 0x0) r10 = socket$inet6(0xa, 0x4, 0x1) ioctl$FIBMAP(r10, 0x1, &(0x7f00000001c0)=0x2) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 18:18:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x0, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:12 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) unshare(0x40000000) unshare(0xa0408c0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x0, 0x4, 0x1}}, 0x14) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:18:12 executing program 5: syz_clone3(&(0x7f0000000a00)={0x10000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:18:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x10000b}) 18:18:12 executing program 4: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x126}, 0x18) 18:18:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x5, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:18:12 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffff9}) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000180)={0x0}) 18:18:12 executing program 1: syz_io_uring_setup(0x1cec, &(0x7f0000000000)={0x0, 0x9366}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 692.284812][T23451] ptrace attach of "/root/syz-executor.4 exec"[3655] was attempted by "/root/syz-executor.4 exec"[23451] 18:18:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x5, 0x4) 18:18:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8983, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 18:18:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x2084c2) syz_io_uring_setup(0x30aa, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 18:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x210440, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="652e0f32ba4000ec0f01c2ce66b9010200000f320f607291360f0866b95403000066b87f3d880766ba000000000f30b800088ee036260f01d1", 0x39}], 0x1, 0x1, &(0x7f00000001c0), 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/nd', 0x400000, 0x8a) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) (async) r8 = syz_open_pts(r3, 0x0) r9 = dup3(r8, r3, 0x0) (async) r10 = socket$inet6(0xa, 0x4, 0x1) ioctl$FIBMAP(r10, 0x1, &(0x7f00000001c0)=0x2) (async) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 18:18:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="a054a97d2fa61fa790f2cf10d452c553d5f01a362338e0e60419e6f5d0789811c976ed6e692784366676e481f03c2085922419411c395df70536043c9c6f46977aec4781b0a20c92f8e96195804f9fd79f4ecaea0dc321b73447aef03ff4003dbcb3de9c1cfbb7c627d6d3025453fab497d4e2be7a9e675d20afdf0b44169c9139a4b320653851babd6c43919f84d2c590a1ac1843074907c2dfe94972f0e03d2ddb9b511801c56d5b47ec7f5beae5bd0106f18ccf134d4043b23be9057d4b1419170297158be0dedac91133931726", 0xcf}, {&(0x7f0000000300)="2e0ef983dcfaa8d1de35e5f0a7b009844e552d8786ae72b5e3f103e707bc0c505437bcf7ee5c0f9c11ddb5497d4cbd72bedfba66048d7c99b01d2ba37083f9d6bc155241d183c9111ae9ddbd95cec795a1abe9c037c51ffbc787664f", 0x5c}, {&(0x7f0000001ac0)="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", 0x3a5}], 0x3}}], 0x1, 0x0) 18:18:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x1100}}], 0x1, 0x0) 18:18:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000380)="1c22", 0x2}], 0x1}, 0x800) 18:18:13 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) (async) unshare(0x40000000) (async) unshare(0xa0408c0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x0, 0x4, 0x1}}, 0x14) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:18:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x0, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:13 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3637, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, '/dev/cuse\x00'}}, 0x2b) 18:18:13 executing program 4: syz_io_uring_setup(0xb43, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x80000315}, &(0x7f0000005000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, 0x0, 0x0) 18:18:13 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000010000001807"]) 18:18:13 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x85, 0x1, "53fb10b3a51d91c5186842ca2ca0ef48d13e59b2fc49ef3912494b5199db201a7a68fc3280761add8d32d812a723bc1bb6f479df052415bcf084eed8699a165300ec266b8bef6e6d1e35ddd91611d53e1d046071e9e82f37b5d08b09f7f8cf6cdefd13a04c73e28d8b097827b8418851591b2a4cd1814235feabe0837951376be1"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "d54de41ea3b2c16571294c67aa7ac13d17375db5ab2f18afe83af702feec8c5ad27160a6be0c3e909c0a9cf6df15ac5e9943c20102412a2362ef6e5141ae164300aa234f7a2dbabdb1f258a5d5f69f876e402f0a40edcadd1af86012cdca6dbe977a9a3aaac3c817486ad6aee8b4ed9062894fca987a6683dcb0bedf8b977097317d973e4797e5a92d9beb2499699837daf6795b3c560ba8a5858597303d7c268c3f"}, @INET_DIAG_REQ_BYTECODE={0x149, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "5acf610c1e738aee0aadcd907173e9b3c02af865aa2927182e73cdaf89"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "381aa1b0955d988246880f14fdc8ea7bd4ae56e5930be311aa28aa4b280c74c53986a6ad3635755389d8722ec7021da78fe7e605bb2ddf1e4bcca4576c14eaa73967763f309d38f57ff7ee2fd985a3ffa5946cfe9ebd76dd2b38b29a517f111f100069c2dc75e80348239153ee98ef5c451dc843571fedbf0579f255a0c30069f22b6647e7fcc947f26068de0d35e272e9062da361a21014d1bf531e550f7a1b51172bcdd09e1e8ae07947cdd1b0a47cfd28ab439b272d20a81c32db6deccc4db0518b54bd2d3d5bdae44fd114b7ca2be1e4d496233d58d90532e23475b9cfbff831ead6ab"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "e71ba249a7cba634c78bda31185980dfe108e99e040f777f68441c8ee5b797b8a73f341ec8dd30ea0d8f937138ceba6b9c9f064112331537a73eae352fe22c6adf49d3ecf73e8abe118e985e0737df53ccd29c5002c63299a76a2d562c85f6476695834b485de4978eee19d730f77de47b8aabf604a564a1ab8f3bc813d30a4d5ff9ebc2d320134194e63f6456558ad1a796ef4312acc04b820108124664da7091dd0f042f733219302401f52a5abf2bd59ca4af7dad93c9f6"}, @INET_DIAG_REQ_BYTECODE={0xa61, 0x1, "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"}]}, 0xec4}}, 0x0) 18:18:13 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) (async) unshare(0x40000000) (async) unshare(0xa0408c0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x0, 0x4, 0x1}}, 0x14) (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x210440, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="652e0f32ba4000ec0f01c2ce66b9010200000f320f607291360f0866b95403000066b87f3d880766ba000000000f30b800088ee036260f01d1", 0x39}], 0x1, 0x1, &(0x7f00000001c0), 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/nd', 0x400000, 0x8a) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_open_pts(r3, 0x0) r9 = dup3(r8, r3, 0x0) r10 = socket$inet6(0xa, 0x4, 0x1) ioctl$FIBMAP(r10, 0x1, &(0x7f00000001c0)=0x2) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x210440, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="652e0f32ba4000ec0f01c2ce66b9010200000f320f607291360f0866b95403000066b87f3d880766ba000000000f30b800088ee036260f01d1", 0x39}], 0x1, 0x1, &(0x7f00000001c0), 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/nd', 0x400000, 0x8a) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) (async) syz_open_pts(r3, 0x0) (async) dup3(r8, r3, 0x0) (async) socket$inet6(0xa, 0x4, 0x1) (async) ioctl$FIBMAP(r10, 0x1, &(0x7f00000001c0)=0x2) (async) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) 18:18:13 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)={0x14}, 0x14}}, 0x0) 18:18:14 executing program 5: socketpair(0xa, 0x3, 0x9, &(0x7f0000000040)) 18:18:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="3010", 0x2}], 0x1}, 0x0) 18:18:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="52dfe14e5be30dae90665c780116680e6fc990c4a2c8f3f066a50e27af733e7919e8", 0x22}, {&(0x7f00000000c0)="0b6cfdeb1cb6ff774d2d6ad7dacb861b2ae853d0bacb64b6cd1a2ee832ba7110a3935669c200e06180ad4a08e14ba630c23e80dc88876003d482bbd621accf22f5f0de", 0x43}, {&(0x7f0000000140)="96e73398dd3e32d12677f4c313a3a4fd2f1972586b8e1cdaf5f2a972c612a56405fb5c4e380517b92ac9ee216f745b643dbe59b82840c2a807b21502ccd45ad61a690c88eb197eb51ab70f1d6421669f21daf4ecb95768d5857d8ea38bb9430f4037a72cb0b8148f5e50e4f8826419860b897e6ac7afb8bfb4273850ac22f0ffbb4bf223bc0d5be37537b86f493970d558fe53", 0x93}, {&(0x7f0000000240)="cc", 0x1}], 0x4, &(0x7f0000000540)=[@ip_tos_u8={{0x11}}], 0x18}, 0x4000000) 18:18:14 executing program 0: unshare(0x40000000) unshare(0x18000e00) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x102, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x0, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xaa76b377d174af3b, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="0c268a927f1f6588b967481241ba78600934f65ae3b4834fdc22b3f1e01634e7031277be387f35597c2f34484bb02bd67aa03859bcecc7a95425a3a07e758044ab4ea609ee25c1428541d88fecf90b1a7511bf746bec66ba0000040fa0fa000000", 0x61, 0x24008085, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/4098, 0x1002}], 0x1, 0x0, 0x41, 0xd002}, 0x2062) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100005) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000080100003050100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c6530205d2e3a7d5c202f64655e2f6b766d00205d2b3a247d2b5d202f64657600000000000000004c026aea81518e383a100c04f480f3c3c3e1e1169bb113702f61b163e7ea5300eb77274ed9cdc44f8182b9a78e5e01000080d7cb14833cb405c765236b75a840e7cb7a49b95d364a2c59155d1e8b6a59dee396f56fa939857837b1890fe3ad94525d98bd364b19a5fc67736fd978dd4fad8ccbe1730c421f7393efb682979a100aa02d1767c62dd19b3c"], 0xb9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0xfffffffd, 0x0, 0x0, 0x0, 0x1b, "004000151d113c81fcf700"}) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2880, 0x80) 18:18:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8913, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 18:18:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', 0x0}) 18:18:14 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001300016a"], 0x4c}}, 0x0) 18:18:14 executing program 0: unshare(0x40000000) unshare(0x18000e00) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x102, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x102, 0x40000) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:14 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 18:18:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x6e0, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x8e, 0xad, 0x1000], [0x7ff, 0x401, 0x20, 0x9], 0x0, [0x4, 0x7]}, 0x5, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x604, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "5bbbe3013f968039805c5cc5f7436c8cbc05abc8f822027acc9273b023679f8f09"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "37fafa30ca12765b2f767401bfb17d8b8ac955eba9b3f47bfcd0c041e56261dd86d536980513c75e1d253ee91e11440573c727fcea9458ebc74fa6eec6087789b52c552da8c06e5d74b2d8b5fcec225c4217f067af515b3c571bc28eeeefc5ddde7d"}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x4004881}, 0x4000) 18:18:14 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd608b0300000889"], 0x0) 18:18:14 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40080c0) [ 694.263106][T23542] netlink: 1552 bytes leftover after parsing attributes in process `syz-executor.1'. 18:18:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xaa76b377d174af3b, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) (async, rerun: 64) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="0c268a927f1f6588b967481241ba78600934f65ae3b4834fdc22b3f1e01634e7031277be387f35597c2f34484bb02bd67aa03859bcecc7a95425a3a07e758044ab4ea609ee25c1428541d88fecf90b1a7511bf746bec66ba0000040fa0fa000000", 0x61, 0x24008085, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/4098, 0x1002}], 0x1, 0x0, 0x41, 0xd002}, 0x2062) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100005) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000080100003050100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c6530205d2e3a7d5c202f64655e2f6b766d00205d2b3a247d2b5d202f64657600000000000000004c026aea81518e383a100c04f480f3c3c3e1e1169bb113702f61b163e7ea5300eb77274ed9cdc44f8182b9a78e5e01000080d7cb14833cb405c765236b75a840e7cb7a49b95d364a2c59155d1e8b6a59dee396f56fa939857837b1890fe3ad94525d98bd364b19a5fc67736fd978dd4fad8ccbe1730c421f7393efb682979a100aa02d1767c62dd19b3c"], 0xb9) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0xfffffffd, 0x0, 0x0, 0x0, 0x1b, "004000151d113c81fcf700"}) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2880, 0x80) 18:18:14 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x1c, r0, 0x209, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 18:18:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x0, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0xaa76b377d174af3b, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="0c268a927f1f6588b967481241ba78600934f65ae3b4834fdc22b3f1e01634e7031277be387f35597c2f34484bb02bd67aa03859bcecc7a95425a3a07e758044ab4ea609ee25c1428541d88fecf90b1a7511bf746bec66ba0000040fa0fa000000", 0x61, 0x24008085, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/4098, 0x1002}], 0x1, 0x0, 0x41, 0xd002}, 0x2062) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100005) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000080100003050100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c6530205d2e3a7d5c202f64655e2f6b766d00205d2b3a247d2b5d202f64657600000000000000004c026aea81518e383a100c04f480f3c3c3e1e1169bb113702f61b163e7ea5300eb77274ed9cdc44f8182b9a78e5e01000080d7cb14833cb405c765236b75a840e7cb7a49b95d364a2c59155d1e8b6a59dee396f56fa939857837b1890fe3ad94525d98bd364b19a5fc67736fd978dd4fad8ccbe1730c421f7393efb682979a100aa02d1767c62dd19b3c"], 0xb9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0xfffffffd, 0x0, 0x0, 0x0, 0x1b, "004000151d113c81fcf700"}) (async) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2880, 0x80) 18:18:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}, 0x0) 18:18:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 18:18:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x84, 0x25, 0x0, 0x0) 18:18:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x40000240) 18:18:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)={0x14, 0x10, 0x11}, 0x14}}, 0x0) 18:18:15 executing program 0: unshare(0x40000000) unshare(0x18000e00) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x102, 0x40000) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x102, 0x40000) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x1c}}, 0x0) 18:18:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) 18:18:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)={0x14, 0x10, 0x11}, 0x14}}, 0x0) 18:18:15 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 18:18:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x0, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x5, 0x3, 0x2, 0x8, 0x18, "4fdcca04c032b20a44b8dbce033be69edc5cd2"}) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000140)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r4 = dup3(0xffffffffffffffff, r3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 18:18:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 18:18:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000002600)=[{&(0x7f00000000c0)="51bc0373ff008aba55a309a9ca9eb7ef1b44d11e7ded2429cb4639afbdf527bd552b377b7d5e1c482bf9874d31631052b5c46fee66d81155b650ae4b9822a98e47edd8cae0b8afc0a91be146a3d68fb542998b87328c1030ac119afb371273e50688de126acf4390b9d34fd2499d7e1ea507183fded7e9", 0x77}, {&(0x7f0000000240)="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", 0x535}, {&(0x7f0000001240)="94482b85a2", 0x5}], 0x3}, 0x0) 18:18:16 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000c00)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 18:18:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 18:18:16 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x208800, 0x0) 18:18:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 18:18:16 executing program 1: syz_open_dev$ndb(&(0x7f0000004380), 0x0, 0x600001) 18:18:16 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x5, 0x3, 0x2, 0x8, 0x18, "4fdcca04c032b20a44b8dbce033be69edc5cd2"}) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000140)) (async, rerun: 32) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32) r4 = dup3(0xffffffffffffffff, r3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 18:18:16 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x80, &(0x7f00000009c0)) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x40242, 0x0) io_setup(0x9, &(0x7f0000000100)) 18:18:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x0, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:17 executing program 4: getresgid(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000400), 0x0, 0x2) 18:18:17 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "d9f417f194921a91564994624b46b07c0000000000000000afce756e591c19878146cf5f18869e34fa846700d21571f91971eb64303600", 0x8001}, 0x48, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "57f1806fd115dd93b602dc77b0746a91e666ad6a920968418e8a791ace30ac0855ea6bfb49a1a563de8d5998c98d4af47ff619237157cbd0691bc9f08e3084b3", 0x1f}, 0x17, 0xfffffffffffffffb) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='.request_key_auth\x00', r0) 18:18:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x5, 0x3, 0x2, 0x8, 0x18, "4fdcca04c032b20a44b8dbce033be69edc5cd2"}) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000140)) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async) r4 = dup3(0xffffffffffffffff, r3, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 18:18:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) 18:18:17 executing program 0: unshare(0x40000000) (async, rerun: 64) unshare(0x18000e00) (async, rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:17 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 18:18:17 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 18:18:17 executing program 5: io_setup(0x4, &(0x7f0000004880)=0x0) io_destroy(r0) io_destroy(0x0) 18:18:17 executing program 4: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x4900, 0x0) 18:18:17 executing program 4: socketpair(0x1e, 0x0, 0x8000, 0x0) 18:18:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f00000000c0)="72786345884e8d9fb8") [ 697.023831][T23688] x_tables: duplicate underflow at hook 3 18:18:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x0, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:18 executing program 4: socketpair(0x29, 0x2, 0x2, 0x0) 18:18:18 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/68) 18:18:18 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x2}, 0x0) 18:18:18 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:18 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) 18:18:18 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) 18:18:18 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) read$char_usb(r0, &(0x7f0000002140)=""/76, 0x4c) 18:18:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') 18:18:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="70a4", 0x2}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x50}, 0x0) 18:18:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private1, @in=@remote}}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 18:18:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001000)={&(0x7f0000000000), 0xc, &(0x7f0000000fc0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x28}}, 0x0) 18:18:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x0, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:19 executing program 1: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) 18:18:19 executing program 0: unshare(0x40000000) unshare(0x20100) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readahead(r1, 0x0, 0x9) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:19 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) 18:18:19 executing program 5: socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 18:18:19 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x24a2c3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:18:19 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) 18:18:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) 18:18:19 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040), 0x4) 18:18:19 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) 18:18:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x31) 18:18:19 executing program 1: io_setup(0x401, &(0x7f0000000700)=0x0) io_cancel(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 18:18:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x0, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:20 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) 18:18:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xeb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "ddbac854b65317709386f994b801252f35b695a34070699b4c74406737138d8a90d7f854217eac9263c3d42300e8cb8a7b274420be375ce8d0331ec663c620ee2f0c45fca3448c22842ce2f24523a5e8b53c4fd5e0ce1c16f961e772c0c1362fb7359b6806f1334c5abf926778789175d810d4bc8020f83da434efb8ec17cf4c58a98ff7ad"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[-%\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbcd, 0x4, "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"}]}]}, 0xec4}}, 0x0) 18:18:20 executing program 0: unshare(0x40000000) unshare(0x20100) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readahead(r1, 0x0, 0x9) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:20 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 18:18:20 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000005980), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)) 18:18:20 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000010c0)=@get={0x1, 0x0, 0x51514bda}) 18:18:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') read$ptp(r0, 0x0, 0x0) 18:18:20 executing program 5: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) setns(r0, 0x80) 18:18:20 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x30]}, &(0x7f0000000140)={0x0, "413748d6930df0e7f43002172a8beb70499bd1cb69a181a16a5b807da9ff145635ac5027e300e8f1df8b77dc09a5d5fafb4b31f8764619174175b397057473f3"}, 0x48, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x103) 18:18:20 executing program 4: r0 = getpid() kcmp(0xffffffffffffffff, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 18:18:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c80), r0) [ 699.971290][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:18:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r1}}, 0x30) 18:18:21 executing program 4: io_setup(0x401, &(0x7f0000000700)) 18:18:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000004800)={{0x1, 0x1, 0x18}, './file0\x00'}) io_setup(0x4, &(0x7f0000004880)=0x0) io_destroy(r0) 18:18:21 executing program 0: unshare(0x40000000) (async) unshare(0x20100) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) readahead(r1, 0x0, 0x9) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (rerun: 32) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x0, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:21 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:18:21 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x3a) 18:18:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000240)={0x10}, 0x10}, {0x0}], 0x2, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}, 0x0) 18:18:21 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan0\x00') 18:18:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) 18:18:21 executing program 1: r0 = add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, r0) 18:18:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x3, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x13, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 18:18:21 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) unshare(0x40000100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001200)=""/219, 0x2e, 0xdb, 0x1}, 0x20) 18:18:21 executing program 4: syz_clone(0x23000080, &(0x7f0000000f40), 0x0, 0x0, 0x0, 0x0) 18:18:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000080)=""/167, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x6, 0x80000000, 0x5}, 0x10}, 0x80) 18:18:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x0, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:22 executing program 4: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "8dcb"}, @extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "d660c4b7bb"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "5292"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0xa1, 0x2, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x20}}}}}}}]}}, 0x0) 18:18:22 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb000900000825020b9b6a7d000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x79, 0x18, 0x7d, 0x0, 0xeb1a, 0x5051, 0xb56e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf8, 0xe2, 0x1e}}]}}]}}, 0x0) syz_usb_disconnect(r0) 18:18:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "37f6fe93e3e0dd102e0271b9119c579782ebdb4e8f8e3969fba28aa7aefaa45a983e1f5757ba4c91d19c565dc1f33f9fb85455b096fc4921749b616efd7cc102a25c3b17a97a0455781429e481d006f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x26, 0x0, "1ee778b325b79b646626d7cf0f53ba6cdd9ad213a109bf65839d4439b8a77ff8a8497f5f2fbcc1511f6147648bb0be30ad95e3a2d253e690f5e61322ccc34cd3368335ea9ee7042b891cf5e560404711"}, 0xd8) 18:18:22 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) unshare(0x40000100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) unshare(0x40000100) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:22 executing program 1: syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) [ 701.727223][T12244] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 701.727331][ T3712] usb 5-1: new high-speed USB device number 41 using dummy_hcd 18:18:22 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) unshare(0x40000100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) unshare(0x40000100) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) [ 701.867258][ T3681] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 701.987281][T12244] usb 6-1: Using ep0 maxpacket: 8 [ 702.027298][ T3712] usb 5-1: Using ep0 maxpacket: 16 [ 702.117426][T12244] usb 6-1: config 0 has no interfaces? [ 702.123050][T12244] usb 6-1: New USB device found, idVendor=0225, idProduct=9b0b, bcdDevice=7d.6a [ 702.137422][T12244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.147495][ T3712] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 702.173120][ T3712] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 702.195222][T12244] usb 6-1: config 0 descriptor?? [ 702.234813][ T3712] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 702.275844][ T3712] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.287418][ T3681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.316401][ T3712] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 18:18:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0x0, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) [ 702.437327][ T3681] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 702.468334][ T3681] usb 2-1: can't read configurations, error -71 [ 702.481284][T12244] usb 6-1: USB disconnect, device number 6 [ 702.527390][ T3712] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.549402][ T3712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.567859][ T3712] usb 5-1: Product: syz [ 702.572454][ T3712] usb 5-1: Manufacturer: syz [ 702.581763][ T3712] usb 5-1: SerialNumber: syz 18:18:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=""/171, 0xab}, 0x2}], 0x3, 0x140, &(0x7f0000001780)={0x0, 0x989680}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x254310) [ 702.937368][ T3712] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 703.035124][ T3712] usb 5-1: USB disconnect, device number 41 18:18:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0x0, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:24 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:18:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @mcast2, @loopback, 0x0, 0x80}) 18:18:24 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x2, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 18:18:24 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 18:18:24 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42c3, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) 18:18:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "84"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) [ 703.837291][ T3712] usb 6-1: new high-speed USB device number 7 using dummy_hcd 18:18:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) [ 704.097373][ T3712] usb 6-1: Using ep0 maxpacket: 16 18:18:24 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42c3, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r2) (async) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42c3, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:24 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000340), 0x9) [ 704.217303][ T3712] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.244118][ T3712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.259361][ T3712] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 704.299066][ T3712] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 704.497602][ T3712] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.510231][ T3712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.528921][ T3712] usb 6-1: Product: syz [ 704.538926][ T3712] usb 6-1: Manufacturer: syz [ 704.549302][ T3712] usb 6-1: SerialNumber: syz [ 704.877530][ T3712] usb 6-1: 0:2 : does not exist [ 704.926938][ T3712] usb 6-1: USB disconnect, device number 7 [ 704.977984][T23433] udevd[23433]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 18:18:25 executing program 1: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f0000000300)={'gre0\x00', 0x0}) 18:18:25 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 18:18:25 executing program 5: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 18:18:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x9, 0x0, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:25 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(r0, 0x540a, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x4c, 0x10, 0x0}, 0x80) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) (async) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x42c3, 0x0) (async) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x400, 0x4, 0xff}, 0x48) 18:18:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1}, 0x18) 18:18:25 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 18:18:25 executing program 1: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f0000000300)={'gre0\x00', 0x0}) 18:18:25 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1, {0xa, 0x0, 0x0, @dev}}, 0x24) 18:18:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000), 0x4) 18:18:26 executing program 5: r0 = socket(0x2, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, 0x0}, 0x4800) 18:18:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:18:26 executing program 4: unshare(0x40000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair(0xb, 0x21e751cec7fc7d2e, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040020}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="08009f0000000000080027000300000008009f0007000000080026006c090000bad6a000f8ffffff080082000001000008009f0003000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xa50e92707b7033b9) syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 18:18:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x0, 0x0, 0x120}, 0x48) 18:18:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x0, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:26 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6e}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:26 executing program 1: socket(0x3c, 0x0, 0x0) 18:18:26 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) 18:18:26 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0045878, 0x0) 18:18:26 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000080)='TIPC\x00', 0x5) 18:18:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) 18:18:26 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, 0x0) 18:18:27 executing program 5: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000340)=ANY=[]}) 18:18:27 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x4282bfed, 0x8) 18:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 18:18:27 executing program 5: unshare(0x40000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0xa50e92707b7033b9) syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) 18:18:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x0, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:27 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x4020940d, &(0x7f0000000300)={'gre0\x00', 0x0}) 18:18:27 executing program 1: socketpair(0x23, 0x0, 0x2, &(0x7f0000000040)) 18:18:27 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6e}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6e}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:27 executing program 5: r0 = socket(0x2, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x80, 0x0}, 0x0) 18:18:27 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:18:27 executing program 5: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, 0x0) 18:18:27 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0, 0xf0ff7f00000000}}, 0x0) 18:18:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001"], 0x3c}}, 0x0) 18:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 18:18:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 707.355758][T23972] nfsd: failed to allocate reply cache 18:18:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 18:18:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0xf55, 0x0, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:28 executing program 1: r0 = socket(0x2, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp={0xa, 0x0, @dev}, 0x80, 0x0}, 0x0) 18:18:28 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, 0x0) 18:18:28 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000001540)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\'-[{@-+'}, 0x34, 0xfffffffffffffffa) 18:18:28 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6e}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6e}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:28 executing program 5: clock_getres(0x6, &(0x7f0000000140)) 18:18:28 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x0, 0x7}) 18:18:28 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 18:18:28 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040), 0x0) 18:18:28 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x85000822) 18:18:28 executing program 1: socketpair(0x2, 0x0, 0x7f8, &(0x7f00000002c0)) 18:18:28 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 18:18:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0x0, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:29 executing program 5: r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 18:18:29 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:29 executing program 1: bpf$BPF_LINK_UPDATE(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x35313b9f385eff0c}, 0x10) 18:18:29 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1848000001000000000000000000000018450000fcffffff0000000000000000185700000f00000000000000000000001835000001000000000000000000000000890100d00100000d930600f0ffffffc5e5c0fff0ffffff181a0000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x5c, &(0x7f00000003c0)=""/92, 0x1e00, 0xb, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x200, 0x8}, 0x10, 0xffffffffffffffff}, 0x80) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:29 executing program 5: add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=',&\x00\x97>_\x05\n\xd2@\xf1(Y\xa6\x88b\x83\xe4\x1f\x87\x18^\x9f\xe0\xc06\xb3W\xc4\xa0\xa1\x86\xd8A\x96{\xfd$\x82}\xbbF\xab\x85\xb8\xe1d\x8bA\x81\xa7}\x18pv\xd76\xcb\x03ta}T\xb3~z\x9e\xda\xcf-\xab\xf3%;\x062#OH\x91\xc7\xe4\xac\x94\xf5\"P\xa7v\xa2\xedH\x18\xddV\xc6\xe9p\x88:/^\xbe\x01\x82\xf2\xbb\x00\x7f\x00\xaf\x87\xff\xbc\"\x8b{\x0efT8}\x9bdG\xc7h\xf0}\t\xce\x86\xbd\xac6\x9f\v', 0xffffffffffffffff) 18:18:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0xf) 18:18:29 executing program 4: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) poll(&(0x7f00000010c0)=[{}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x708}], 0x4, 0x8) 18:18:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:18:29 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0xd0f45818aee29af, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 18:18:30 executing program 4: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 18:18:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1b8}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) [ 709.763737][ T3688] usb 6-1: new high-speed USB device number 8 using dummy_hcd 18:18:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0x0, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0045878, 0x0) 18:18:30 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) read$FUSE(r2, &(0x7f0000003ac0)={0x2020}, 0x2020) getpgid(0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 18:18:30 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1848000001000000000000000000000018450000fcffffff0000000000000000185700000f00000000000000000000001835000001000000000000000000000000890100d00100000d930600f0ffffffc5e5c0fff0ffffff181a0000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x5c, &(0x7f00000003c0)=""/92, 0x1e00, 0xb, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x200, 0x8}, 0x10, 0xffffffffffffffff}, 0x80) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:30 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019000)=""/102380, 0xffffffb0) [ 710.277466][ T3688] usb 6-1: unable to get BOS descriptor or descriptor too short 18:18:30 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1848000001000000000000000000000018450000fcffffff0000000000000000185700000f00000000000000000000001835000001000000000000000000000000890100d00100000d930600f0ffffffc5e5c0fff0ffffff181a0000", @ANYRES32, @ANYBLOB="0000950e601717aebee893b4fb25000000000000851000681fff7fff1853000007000000001091bf92e1c67997f5e4b307cec9ca079e95f2ee1a08e7a01f481beeba37b77db2f0ab91cf488b5198a2ec35c6278e72104c6172a2f3ae7915c8a87f1ea39b1865c4c06a2f769e4e2674da3c4df3a420f591f08703db4c9768c310253b4855cf0eed68c47d81bce49e41c20f661748c2693eea365267afd4b3a2bd7592b7063c351e84d1de2d2b12ca4eea79460464de070eadf3159d8e9f36a10df9d762d7d0f934c805a8b7eb59fe352f06805bbbe4d626ce86fb5525b02d60d2938403098fd418ca061c0f68e21b1163d7872327e38b4b759b10a1d2dc3b83b16426ed04a26b90c3cbd5301c76f9709ac621de5c5dc760efb8a16480925226f76b2350bf6f6a74e6510bfc7c95ad64f445ee44045a39d64db171837450a567862ffe99cd84cbddb07f8efc01cb7ad798da32ad15ee90cccee48bcf0d20d7ee29aecdb135d2bd45855511ce82417ab0808221726f45472562aebd3cb7bde0cffb3077f43094a4d3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x5c, &(0x7f00000003c0)=""/92, 0x1e00, 0xb, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x200, 0x8}, 0x10, 0xffffffffffffffff}, 0x80) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1848000001000000000000000000000018450000fcffffff0000000000000000185700000f00000000000000000000001835000001000000000000000000000000890100d00100000d930600f0ffffffc5e5c0fff0ffffff181a0000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x5c, &(0x7f00000003c0)=""/92, 0x1e00, 0xb, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x200, 0x8}, 0x10, 0xffffffffffffffff}, 0x80) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) [ 710.367401][ T3688] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 710.587571][ T3688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.611912][ T3688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.656148][ T3688] usb 6-1: Product: syz [ 710.681934][ T3688] usb 6-1: Manufacturer: syz [ 710.707354][ T3688] usb 6-1: SerialNumber: syz [ 710.789239][ T3688] cdc_ether: probe of 6-1:1.0 failed with error -22 18:18:31 executing program 4: syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x0) 18:18:31 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x20242, 0x0) [ 710.993931][ T3688] usb 6-1: USB disconnect, device number 8 18:18:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000000)=':') 18:18:32 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) 18:18:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 18:18:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x42, 0x0, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:32 executing program 4: add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 18:18:32 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40942, 0x0) sendfile(r0, r0, 0x0, 0x7) 18:18:32 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='ip6_vti0\x00') 18:18:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x1000, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) [ 711.693727][T24121] kernel profiling enabled (shift: 0) 18:18:32 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4}, @call, @cb_func={0x18, 0x7}, @call={0x85, 0x0, 0x0, 0x8c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x67d3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:32 executing program 0: unshare(0x54000080) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x22800, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:32 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffe, 0x84f, 0x4, 0x0, 0x7, 0x5}, &(0x7f0000000040)={0x1, 0x3012ee67, 0x3ff}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 18:18:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 18:18:32 executing program 0: unshare(0x54000080) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x22800, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@enc_lim, @jumbo, @pad1, @generic={0x0, 0xdc, "dcda977d370fd93667c96354ea0695dd27166d18c2646875f4393cffeb508372ce3b180b123ed2a62bd266ace38de96df3c2830a712c1b95b9b9f1312c79dd6d5f196c652105741b2a6e1faf32e0bbc3185d185271c40ae4a74c16612f636808128b5b497a019d6457cf600cfcf01d165ef7babae47d04b80bfb79842b62850dce4ac9d1ea51abb8e008f0e71b13c3c18fac4e864dfadd1a071dd168b03d69110571fb27e70213992b154c249b6018a712609fc66884460f23d6a38c25b2825464c77a3fe393f03843e766bbcb8150d4e1cc604e54c8cc875f001a1e"}, @pad1, @hao={0xc9, 0x10, @private1}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)="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", 0xd59}], 0x1}}], 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 18:18:32 executing program 4: bpf$BPF_LINK_UPDATE(0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x35313b9f385eff0c}, 0x10) 18:18:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x0, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:33 executing program 0: unshare(0x54000080) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x22800, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) r2 = dup(r1) (rerun: 32) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5421, 0x0) 18:18:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40086602, 0x0) 18:18:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@enc_lim, @jumbo, @pad1, @generic={0x0, 0xdc, "dcda977d370fd93667c96354ea0695dd27166d18c2646875f4393cffeb508372ce3b180b123ed2a62bd266ace38de96df3c2830a712c1b95b9b9f1312c79dd6d5f196c652105741b2a6e1faf32e0bbc3185d185271c40ae4a74c16612f636808128b5b497a019d6457cf600cfcf01d165ef7babae47d04b80bfb79842b62850dce4ac9d1ea51abb8e008f0e71b13c3c18fac4e864dfadd1a071dd168b03d69110571fb27e70213992b154c249b6018a712609fc66884460f23d6a38c25b2825464c77a3fe393f03843e766bbcb8150d4e1cc604e54c8cc875f001a1e"}, @pad1, @hao={0xc9, 0x10, @private1}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)="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", 0xd59}], 0x1}}], 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 18:18:33 executing program 0: unshare(0x40000000) unshare(0x5c020d80) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x1c9001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x4252) 18:18:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@enc_lim, @jumbo, @pad1, @generic={0x0, 0xdc, "dcda977d370fd93667c96354ea0695dd27166d18c2646875f4393cffeb508372ce3b180b123ed2a62bd266ace38de96df3c2830a712c1b95b9b9f1312c79dd6d5f196c652105741b2a6e1faf32e0bbc3185d185271c40ae4a74c16612f636808128b5b497a019d6457cf600cfcf01d165ef7babae47d04b80bfb79842b62850dce4ac9d1ea51abb8e008f0e71b13c3c18fac4e864dfadd1a071dd168b03d69110571fb27e70213992b154c249b6018a712609fc66884460f23d6a38c25b2825464c77a3fe393f03843e766bbcb8150d4e1cc604e54c8cc875f001a1e"}, @pad1, @hao={0xc9, 0x10, @private1}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)="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", 0xd59}], 0x1}}], 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 18:18:34 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 18:18:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4030582a, 0x0) 18:18:34 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) sendto(r0, 0x0, 0xf0ff7f, 0x0, 0x0, 0x0) 18:18:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x0, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@enc_lim, @jumbo, @pad1, @generic={0x0, 0xdc, "dcda977d370fd93667c96354ea0695dd27166d18c2646875f4393cffeb508372ce3b180b123ed2a62bd266ace38de96df3c2830a712c1b95b9b9f1312c79dd6d5f196c652105741b2a6e1faf32e0bbc3185d185271c40ae4a74c16612f636808128b5b497a019d6457cf600cfcf01d165ef7babae47d04b80bfb79842b62850dce4ac9d1ea51abb8e008f0e71b13c3c18fac4e864dfadd1a071dd168b03d69110571fb27e70213992b154c249b6018a712609fc66884460f23d6a38c25b2825464c77a3fe393f03843e766bbcb8150d4e1cc604e54c8cc875f001a1e"}, @pad1, @hao={0xc9, 0x10, @private1}]}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)="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", 0xd59}], 0x1}}], 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 18:18:34 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x28a40, 0x0) 18:18:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 18:18:34 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) sendto(r0, 0x0, 0xf0ff7f, 0x0, 0x0, 0x0) 18:18:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) fadvise64(r0, 0x0, 0x0, 0x0) 18:18:34 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0xd0f45818aee29af, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x44, &(0x7f0000000240)={0x5, 0xf, 0x44, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2d3aa773fe51c4faa534521a235c462d"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b2e1f16a072411caefeccfc938d160d0"}, @generic={0x3}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7}]}}) 18:18:34 executing program 0: unshare(0x40000000) (async) unshare(0x5c020d80) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x1c9001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) r2 = dup(r1) (rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) (async, rerun: 64) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x4252) 18:18:34 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:34 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0xd0f45818aee29af, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0xfb, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8000}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5b}}, {{0x9, 0x5, 0x3, 0x2, 0x3ef}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x44, &(0x7f0000000240)={0x5, 0xf, 0x44, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2d3aa773fe51c4faa534521a235c462d"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b2e1f16a072411caefeccfc938d160d0"}, @generic={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1}, @ext_cap={0x7}]}}) 18:18:34 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0}) 18:18:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) [ 714.007211][ T3712] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 714.107326][ T9166] usb 5-1: new high-speed USB device number 42 using dummy_hcd 18:18:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x8, 0x0, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="f4667f95322cec88003ced1f0c9b4361", 0x10}], 0x1, &(0x7f0000000540)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x80}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x2c, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo, @generic={0x0, 0x62, "dcda977d370fd93667c96354ea0695dd27166d18c2646875f4393cffeb508372ce3b180b123ed2a62bd266ace38de96df3c2830a712c1b95b9b9f1312c79dd6d5f196c652105741b2a6e1faf32e0bbc3185d185271c40ae4a74c16612f636808128b"}, @pad1, @ra={0x5, 0x2, 0x400}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x1}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x84, 0xa, 0x2, 0x7, 0x0, [@local, @local, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x160}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000740)="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", 0xe00}, {0x0}, {0x0}, {&(0x7f0000001740)="b5e33f05", 0x4}, {&(0x7f0000001780)="49694841f0d1f8c82b5f28a3bb532eba6952ead800d8db9208394e7ba21e4a3f873602bccda332277af61dadb718eedf8d1532d051fc1f2898b2646487f19a4ae2dc475b700252dad294e33c0fb5", 0x4e}, {&(0x7f0000001840)="95a5ebe3f9419f4d92f67ca457e580bcaf832e9e158ce66b74dadb9ce87f7914b252b7ffb9661cdc8d740986790a205fab7282dfa89f386d2641b6af617e5cb782ac85fae37ff1697731a1d50085886a7f6aff633888ab6659b82606f819f484d5157d52fd1d9dd9d89ef62062233b4721499fb40a2cf647841d61d51c3fce87e7a7275c56d6bbeb99ee7ca6583636a150b7306313b53a413ffceaa88693cd5a801bf83c32086389fde239be5ea07b", 0xaf}], 0x6}}, {{&(0x7f00000019c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001a00)="c1eb27339e504fa027368ef25fc466e558edda0caf7e3f015b2a319eb8f2f7b380e5d13ee8267d00b930bb3a15e2e4524a3a2c02cbbde91b32ca4698dc1dacf6fed83d6c6dc48afaf09a7176e0d8e6d8764e0267ee3bf0b74d4be7c45a59af0f271ab4d2dd88f667e0f493db07fd1aecb28849d1ea2dae54def646e9a5966cd9d4c6e9cb7e9ce926eb51f777eed45c19d118846733079e8c73336f34ea79e8663e9bcfc799dc2cdc0cf5e9cee6f91f9a2256fbbca8a4832cca857a33b79669014d41d7ea9e679a6bffd5a88b14826147ac2f9e9c275d1b03265d3301d6d5814ffd7f1da1ccebfd6a9400bea9c5fa8c59", 0xf0}, {&(0x7f0000001b00)="9f6c5aa6c11e7c05ce875f86ab4ec70cdf5a0561c2cb5139eac0d16a2832b1bd1ffbcaaf7743e28abdacc81750be59c5b59fb8b78d7dfe487bde4029f96f4d880365621d9aae7149a919a3f7", 0x4c}, {&(0x7f0000001b80)="374c2b646f4d80babbe1e2bff9f4526fdb904740596d36ff4f7df6da9d9f01ab4bc6a593366f785e9cbbe0bc0eb96c58f1f90dac4be0c5c543cec2b42875f5c7db4a87ce60a3f5332b875bce90cea1f6d8933b2d328f11ce4b38173b675296756f6ae8f0b722bb1249fb1b56eec242da834f41ad8e7f930bae50ebc28693a3a8cf05dc084ff6aea9", 0x88}, {&(0x7f0000001c40)="822f242591dc85038996bcac3d2f3a750477379651c112e8e7fedb469ed32b50e3a570dbb47cf061d38732c4cfe4a30c23e44bade1ed09ea27a810a6ab6b59a4d90af3569c1a66a7a7f53ff7ed08143b66df5983f938d386b93051df673d0b332eac287f3d12559791d296b353473efdd88e38f80aefbb5f9ff443e1c2b0bbe079a279e096e080a4c4f1ae425dc0f58cdcb7fb44e4959299a9fc55aed86f8f9f3e97da208bac051081ff58b0a60673b022c9a70771ea936e3ccc08a508c58fa6df634558c627222983452c11fd14dda198dc5da5d8a7056ea2d6a455ca6516dcf6ad61d837156e7327", 0xe9}, {&(0x7f0000001d40)="05af381bed7aba338b5d2eecf592d2afd8fe9171a0c820f2307dd598e871a6fcda97caab6de9632cc41e50b972be813695a36dd545cc1113c32dcd07d1b6e4d46539f5814b9f4e145fe04775dc", 0x4d}], 0x5, &(0x7f0000001e40)=[@hopopts={{0x20, 0x29, 0x36, {0x2e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3f}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x3b, 0x4, '\x00', [@calipso={0x7, 0x8}, @pad1, @generic, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1f, 0x1ff, [0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x40}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x11, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x6}, @generic, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo, @pad1]}}}], 0xd8}}, {{&(0x7f0000002000)={0xa, 0x4e22, 0x5, @private2}, 0x1c, &(0x7f0000002040), 0x0, &(0x7f0000002140)=[@rthdr={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x2, 0x2, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @dev, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x2c, 0x5, '\x00', [@ra={0x5, 0x2, 0x7ff}, @generic={0x1}, @hao={0xc9, 0x10, @remote}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim, @padn, @generic]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffff607}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x158}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:18:35 executing program 0: unshare(0x40000000) (async) unshare(0x5c020d80) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x1c9001, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000100)=0x4252) [ 714.458598][ T3712] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 714.557491][ T9166] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 18:18:35 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), 0x4) [ 714.601177][ T9166] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1007 [ 714.627533][ T3712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.636677][ T3712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.649822][ T9166] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.662998][ T3712] usb 6-1: Product: syz [ 714.667440][ T9166] usb 5-1: config 1 interface 0 has no altsetting 0 [ 714.674253][ T3712] usb 6-1: Manufacturer: syz [ 714.679108][ T3712] usb 6-1: SerialNumber: syz 18:18:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 714.778344][ T3712] cdc_ether: probe of 6-1:1.0 failed with error -22 18:18:35 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) [ 714.838838][ T9166] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.881444][ T9166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.957366][ T9166] usb 5-1: Product: syz [ 714.961700][ T9166] usb 5-1: Manufacturer: syz [ 714.966423][ T9166] usb 5-1: SerialNumber: syz [ 714.987576][T24186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 714.994648][ T3684] usb 6-1: USB disconnect, device number 9 [ 715.030461][T24186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 715.387502][ T9166] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 715.432752][ T9166] usb 5-1: USB disconnect, device number 42 18:18:36 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) 18:18:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 18:18:36 executing program 0: unshare(0x40000000) (async, rerun: 32) unshare(0x18000e00) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:36 executing program 4: mkdir(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 18:18:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x0, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:36 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 18:18:36 executing program 1: syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x3ef}}}}}]}}]}}, 0x0) 18:18:36 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (rerun: 64) 18:18:36 executing program 5: add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 18:18:36 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 18:18:36 executing program 5: r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 18:18:36 executing program 5: add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/13, 0xd) [ 716.117293][ T3688] usb 2-1: new high-speed USB device number 36 using dummy_hcd 18:18:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 18:18:36 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000140)) 18:18:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4a, 0x0) 18:18:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x40049409, 0x0) [ 716.537411][ T3688] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 18:18:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x0, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) [ 716.727381][ T3688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.746677][ T3688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.768801][ T3688] usb 2-1: Product: syz 18:18:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80) [ 716.780901][ T3688] usb 2-1: Manufacturer: syz [ 716.796205][ T3688] usb 2-1: SerialNumber: syz [ 716.907501][T24232] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 716.916487][T24232] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 716.970523][ T3688] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 717.175647][ T3688] usb 2-1: USB disconnect, device number 36 18:18:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:18:38 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x401c5820, &(0x7f0000000000)={r0}) 18:18:38 executing program 5: io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) io_destroy(0x0) 18:18:38 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0xc, 0x6, {0x5, @usage, 0x0, 0x809, 0xa1, 0x6, 0x6, 0x7fff, 0x5c, @usage=0x80, 0x7, 0x1, [0x1a, 0x910, 0x800, 0x9, 0x9, 0x1]}, {0x7, @usage=0x7, 0x0, 0xffffffffffffffff, 0x100, 0x7, 0x100, 0x4, 0xc, @usage, 0x8, 0x7, [0x53, 0x7, 0x8, 0x2, 0x9, 0xb2]}, {0xfffffffffffffffa, @usage=0x3, 0x0, 0x44, 0x6, 0xdcf, 0x400, 0x3, 0x20, @struct={0x4, 0x80000000}, 0x4, 0x6c, [0x573a, 0x7, 0x800, 0x8, 0xffffffffffffffff, 0x40]}, {0xfffffffffffff000, 0x3af2, 0xffffffffffffffe1}}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x2, 0x0, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:38 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) 18:18:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:18:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 18:18:38 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 18:18:38 executing program 1: socketpair(0xf, 0x3, 0x0, &(0x7f0000000280)) 18:18:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) 18:18:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129082, 0x0) 18:18:38 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0xc, 0x6, {0x5, @usage, 0x0, 0x809, 0xa1, 0x6, 0x6, 0x7fff, 0x5c, @usage=0x80, 0x7, 0x1, [0x1a, 0x910, 0x800, 0x9, 0x9, 0x1]}, {0x7, @usage=0x7, 0x0, 0xffffffffffffffff, 0x100, 0x7, 0x100, 0x4, 0xc, @usage, 0x8, 0x7, [0x53, 0x7, 0x8, 0x2, 0x9, 0xb2]}, {0xfffffffffffffffa, @usage=0x3, 0x0, 0x44, 0x6, 0xdcf, 0x400, 0x3, 0x20, @struct={0x4, 0x80000000}, 0x4, 0x6c, [0x573a, 0x7, 0x800, 0x8, 0xffffffffffffffff, 0x40]}, {0xfffffffffffff000, 0x3af2, 0xffffffffffffffe1}}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async, rerun: 32) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'netpci0\x00', 0x600}) 18:18:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002940)="92", 0x1}], 0x1, &(0x7f0000003940)=[{0x28, 0x0, 0x0, "47cba0d37f14ec706ff38d5cc4e86296f5"}], 0x28}, 0x0) 18:18:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:39 executing program 5: socketpair(0x2, 0x1, 0x101, &(0x7f0000000280)) 18:18:39 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002940)="92", 0x1}], 0x1, &(0x7f0000003940)=[{0x10}], 0x10}, 0x0) 18:18:39 executing program 0: unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0xc, 0x6, {0x5, @usage, 0x0, 0x809, 0xa1, 0x6, 0x6, 0x7fff, 0x5c, @usage=0x80, 0x7, 0x1, [0x1a, 0x910, 0x800, 0x9, 0x9, 0x1]}, {0x7, @usage=0x7, 0x0, 0xffffffffffffffff, 0x100, 0x7, 0x100, 0x4, 0xc, @usage, 0x8, 0x7, [0x53, 0x7, 0x8, 0x2, 0x9, 0xb2]}, {0xfffffffffffffffa, @usage=0x3, 0x0, 0x44, 0x6, 0xdcf, 0x400, 0x3, 0x20, @struct={0x4, 0x80000000}, 0x4, 0x6c, [0x573a, 0x7, 0x800, 0x8, 0xffffffffffffffff, 0x40]}, {0xfffffffffffff000, 0x3af2, 0xffffffffffffffe1}}) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:39 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x10102, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') dup(r2) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:18:39 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, &(0x7f0000000500)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 18:18:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x9, 0x2, 0x40}, 0x48) 18:18:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000000)=@raw=[@generic={0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf3, &(0x7f0000000080)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:39 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000340)=""/146, 0x28, 0x92, 0x1}, 0x20) 18:18:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg2\x00', 0x2}) 18:18:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, 0x0) close(r1) 18:18:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x5e0, 0x1}, 0x48) 18:18:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x0, 0x2, 0x40}, 0x48) 18:18:40 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) 18:18:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x104c1, 0x0) 18:18:40 executing program 0: unshare(0x40000000) unshare(0x18000e00) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x10102, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') dup(r2) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x10102, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) dup(r2) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(0xffffffffffffffff) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) (async) 18:18:40 executing program 4: socketpair(0x2, 0xa, 0x0, &(0x7f0000000280)) 18:18:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000000500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 18:18:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/239, 0x0, 0xef}, 0x20) [ 719.636381][T24348] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 18:18:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) 18:18:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000300)=@raw=[@generic, @alu={0x0, 0x0, 0x4}, @exit, @cb_func], &(0x7f00000001c0)='GPL\x00', 0x5, 0xeb, &(0x7f0000000440)=""/235, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@txtime={{0x18}}], 0x18}, 0x0) 18:18:40 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x2, &(0x7f0000000a40)=@raw=[@cb_func], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@raw=[@generic={0x1}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf3, &(0x7f0000000080)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:41 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) 18:18:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x1, 0x3, &(0x7f0000002b40)=@framed, &(0x7f00000028c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:41 executing program 0: unshare(0x40000000) unshare(0x18000e00) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x10102, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') dup(r2) (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x4252) 18:18:41 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000002940)=ANY=[], &(0x7f0000000240)=""/135, 0x47, 0x87, 0x1}, 0x20) 18:18:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x1d}, 0x48) 18:18:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000500)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 18:18:41 executing program 5: syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:18:41 executing program 1: syz_clone(0x2740, 0x0, 0x0, 0x0, 0x0, 0x0) 18:18:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000040)=""/239, 0x26, 0xef, 0x1}, 0x20) 18:18:41 executing program 5: socketpair(0x2, 0x0, 0x600, &(0x7f0000000280)) 18:18:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x0, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:41 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, &(0x7f0000000000)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xbe) 18:18:41 executing program 4: socketpair(0x10, 0x2, 0x101, &(0x7f0000000280)) 18:18:41 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2}]}, {0x0, [0x0, 0x71, 0x2e]}}, &(0x7f0000000b00)=""/239, 0x29, 0xef, 0x1}, 0x20) 18:18:42 executing program 0: unshare(0x40000000) unshare(0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0900e9ffffff05002d2f66696c653000"]) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) 18:18:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000340)=""/146, 0x30, 0x92, 0x1}, 0x20) 18:18:42 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000002940)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000070000000000000000000009"], &(0x7f0000000240)=""/135, 0x47, 0x87, 0x1}, 0x20) 18:18:42 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x11, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:18:42 executing program 4: listen(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000001440)={&(0x7f0000000440)="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", 0x340}) 18:18:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000500)={0x4c, 0x2d, 0x1}, 0x4c}}, 0x0) 18:18:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 18:18:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000400000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, r1, 0x0, 0x0) [ 721.814700][T24435] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 18:18:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x0, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000180013070000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000002000000000000000000000068001200726663343130362867"], 0x158}}, 0x0) 18:18:42 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) pwrite64(r1, &(0x7f00000000c0)="a0", 0x1, 0x5b63) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x2) 18:18:42 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000400000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 18:18:42 executing program 0: unshare(0x40000000) unshare(0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0900e9ffffff05002d2f66696c653000"]) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) unshare(0x40000000) (async) unshare(0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000040)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async) dup(r1) (async) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0x21c0, 0x49, 0x0, {0x0, 0x7000000}}, 0x7942) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') (async) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0900e9ffffff05002d2f66696c653000"]) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x4252) (async) [ 722.406474][T24439] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. 18:18:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x5000}, 0x0) [ 722.501206][T24445] ------------[ cut here ]------------ [ 722.506690][T24445] WARNING: CPU: 0 PID: 24445 at kernel/dma/mapping.c:188 __dma_map_sg_attrs+0x181/0x1f0 18:18:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000500)={0x23, 0x2c}, 0x23}}, 0x0) [ 722.550180][T24445] Modules linked in: [ 722.554645][T24445] CPU: 0 PID: 24445 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00148-gec7f49619d8e #0 [ 722.565792][T24445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.576433][T24445] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 722.606898][T24445] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 30 e4 be 0d e9 db fe ff ff e8 16 52 13 00 0f 0b e8 0f 52 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 00 52 13 00 49 8d 7f 50 48 b8 00 18:18:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0xa}]}, 0x1c}}, 0x0) 18:18:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000500)={0x23, 0x26, 0x1}, 0x4c}}, 0x0) [ 722.657210][T24445] RSP: 0018:ffffc90015757d68 EFLAGS: 00010212 [ 722.681634][T24445] RAX: 00000000000014bd RBX: 0000000000000000 RCX: ffffc9000b601000 18:18:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x50, 0x0, 0xffffffff) [ 722.750416][T24445] RDX: 0000000000040000 RSI: ffffffff8165eea1 RDI: ffff88801c42d408 18:18:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x14, r1, 0x301}, 0x14}}, 0x0) [ 722.835960][T24445] RBP: ffff88801c42d000 R08: 0000000000000002 R09: ffff88807cc8dbcf 18:18:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x0, 0x0, 0x0, 0x0, 0xff8, "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"}, 0x1001, 0x0) [ 722.909094][T24445] R10: ffffffff8165ed82 R11: 0000000000000001 R12: 0000000000000001 [ 722.986526][T24445] R13: ffff8880415e9f00 R14: 0000000000000002 R15: 0000000000000000 [ 723.032213][T24445] FS: 00007f85738ca700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 723.057407][T24445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.064087][T24445] CR2: 00007f46cd9c6028 CR3: 000000007badf000 CR4: 00000000003506e0 [ 723.074539][T24445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 723.083030][T24445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 723.091479][T24445] Call Trace: [ 723.094899][T24445] [ 723.106218][T24445] dma_map_sgtable+0x70/0xf0 [ 723.142019][T24445] get_sg_table.isra.0+0xe0/0x160 [ 723.157439][T24445] begin_cpu_udmabuf+0x130/0x1d0 [ 723.162616][T24445] ? map_udmabuf+0xa0/0xa0 [ 723.172229][T24445] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 723.182067][T24445] dma_buf_ioctl+0x259/0x2b0 [ 723.186910][T24445] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 723.200613][T24445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 723.208234][T24445] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 723.214169][T24445] __x64_sys_ioctl+0x193/0x200 [ 723.230420][T24445] do_syscall_64+0x35/0xb0 [ 723.235035][T24445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 723.249713][T24445] RIP: 0033:0x7f85726890e9 [ 723.254268][T24445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.289052][T24445] RSP: 002b:00007f85738ca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:18:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) getpid() r1 = dup(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x2, 0x2, 0xfffffff7, 0x2, '\x00', 0x6}, 0x1, [0xfffffffffffffff9, 0xb8b, 0x7ff, 0x4, 0x100000001, 0xfffffffffffeffff, 0x6d, 0x3, 0xd4, 0x80, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5, 0x7, 0x3, 0x100000001, 0x7, 0x1000, 0x1, 0x3, 0x3, 0x80000001, 0xff9, 0xffffffffffffffff, 0x7d78, 0x1ff, 0xb50, 0x81, 0x6, 0x1f, 0x0, 0xc3e, 0x6, 0x1, 0x6, 0x1, 0x0, 0x8, 0x4, 0x31e5, 0x7fffffffffffffff, 0x7ff, 0x5, 0xb250, 0x0, 0x7, 0x4, 0x2, 0x3, 0x9, 0x0, 0x3a2, 0x2, 0x8, 0x4, 0x80000000, 0x8001, 0x9, 0xfffffffffffffffc, 0x4, 0x9, 0x7de8, 0x6, 0x7, 0x80000001, 0x7f, 0x8, 0x6, 0x1e87, 0x98, 0x101, 0x2, 0xdb, 0x48b, 0x4, 0x800, 0x8000000000000000, 0x1, 0x3, 0x1, 0x5, 0x0, 0x2, 0x4, 0xb8, 0x8000000000000000, 0x8, 0x6, 0x0, 0x7f, 0x7, 0x0, 0x0, 0x8, 0x42, 0xf55, 0x9, 0xcb, 0x7fff, 0x7, 0x100000001, 0x42, 0x8, 0x0, 0x0, 0x7ce, 0x8, 0xfffffffffffffe00, 0x10001, 0x6, 0x40, 0xfffffffffffffffd, 0x79c, 0x0, 0x400, 0x101, 0x0, 0x1ff, 0x4, 0x3f, 0x3, 0x2, 0xfffffffffffffffc, 0x8000000000000000, 0x2]}) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8854) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x7f, 0x4, 0xa77]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getparam(0x0, &(0x7f0000000000)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640), 0x420000, 0x0) syz_clone3(&(0x7f0000000680)={0x6000080, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0), {0x24}, &(0x7f0000000300)=""/182, 0xb6, &(0x7f00000003c0)=""/131, &(0x7f0000000480)=[0x0, r5, 0x0], 0x3, {r7}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) 18:18:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000400000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) [ 723.315361][T24445] RAX: ffffffffffffffda RBX: 00007f857279bf60 RCX: 00007f85726890e9 [ 723.335195][T24445] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 723.347341][T24445] RBP: 00007f85726e308d R08: 0000000000000000 R09: 0000000000000000 [ 723.374958][T24445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.384181][T24445] R13: 00007f8572ccfb1f R14: 00007f85738ca300 R15: 0000000000022000 [ 723.418855][T24445] [ 723.426454][T24445] Kernel panic - not syncing: panic_on_warn set ... [ 723.433052][T24445] CPU: 1 PID: 24445 Comm: syz-executor.4 Not tainted 5.18.0-rc6-syzkaller-00148-gec7f49619d8e #0 [ 723.443545][T24445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.453605][T24445] Call Trace: [ 723.456887][T24445] [ 723.459818][T24445] dump_stack_lvl+0xcd/0x134 [ 723.464405][T24445] panic+0x2d7/0x636 [ 723.468336][T24445] ? panic_print_sys_info.part.0+0x10b/0x10b [ 723.474310][T24445] ? __warn.cold+0x1d1/0x2c5 [ 723.478887][T24445] ? __dma_map_sg_attrs+0x181/0x1f0 [ 723.484072][T24445] __warn.cold+0x1e2/0x2c5 [ 723.488563][T24445] ? __dma_map_sg_attrs+0x181/0x1f0 [ 723.493750][T24445] report_bug+0x1bd/0x210 [ 723.498066][T24445] handle_bug+0x3c/0x60 [ 723.502210][T24445] exc_invalid_op+0x14/0x40 [ 723.506704][T24445] asm_exc_invalid_op+0x12/0x20 [ 723.511541][T24445] RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 [ 723.517334][T24445] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d 30 e4 be 0d e9 db fe ff ff e8 16 52 13 00 0f 0b e8 0f 52 13 00 <0f> 0b 45 31 e4 e9 54 ff ff ff e8 00 52 13 00 49 8d 7f 50 48 b8 00 [ 723.536923][T24445] RSP: 0018:ffffc90015757d68 EFLAGS: 00010212 [ 723.543090][T24445] RAX: 00000000000014bd RBX: 0000000000000000 RCX: ffffc9000b601000 [ 723.551053][T24445] RDX: 0000000000040000 RSI: ffffffff8165eea1 RDI: ffff88801c42d408 [ 723.559031][T24445] RBP: ffff88801c42d000 R08: 0000000000000002 R09: ffff88807cc8dbcf [ 723.566998][T24445] R10: ffffffff8165ed82 R11: 0000000000000001 R12: 0000000000000001 [ 723.574960][T24445] R13: ffff8880415e9f00 R14: 0000000000000002 R15: 0000000000000000 [ 723.583018][T24445] ? __dma_map_sg_attrs+0x62/0x1f0 [ 723.588126][T24445] ? __dma_map_sg_attrs+0x181/0x1f0 [ 723.593315][T24445] ? __dma_map_sg_attrs+0x181/0x1f0 [ 723.598505][T24445] dma_map_sgtable+0x70/0xf0 [ 723.603095][T24445] get_sg_table.isra.0+0xe0/0x160 [ 723.608117][T24445] begin_cpu_udmabuf+0x130/0x1d0 [ 723.613052][T24445] ? map_udmabuf+0xa0/0xa0 [ 723.617458][T24445] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 723.622914][T24445] dma_buf_ioctl+0x259/0x2b0 [ 723.627491][T24445] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 723.633204][T24445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 723.639436][T24445] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 723.645152][T24445] __x64_sys_ioctl+0x193/0x200 [ 723.649909][T24445] do_syscall_64+0x35/0xb0 [ 723.654317][T24445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 723.660205][T24445] RIP: 0033:0x7f85726890e9 [ 723.664623][T24445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.684212][T24445] RSP: 002b:00007f85738ca168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.692606][T24445] RAX: ffffffffffffffda RBX: 00007f857279bf60 RCX: 00007f85726890e9 [ 723.700558][T24445] RDX: 0000000020000100 RSI: 0000000040086200 RDI: 0000000000000006 [ 723.708511][T24445] RBP: 00007f85726e308d R08: 0000000000000000 R09: 0000000000000000 [ 723.716466][T24445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.724424][T24445] R13: 00007f8572ccfb1f R14: 00007f85738ca300 R15: 0000000000022000 [ 723.732395][T24445] [ 723.735626][T24445] Kernel Offset: disabled [ 723.739948][T24445] Rebooting in 86400 seconds..